Cisco

Sd-wan

27 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2023-20034

  • EPSS 0.42%
  • Veröffentlicht 27.09.2023 18:15:10
  • Zuletzt bearbeitet 21.11.2024 07:40:24

Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to access the Elasticsearch configuration database of an affected device with the privileges of the elasticsearch...

8.1

CVE-2023-20113

  • EPSS 0.18%
  • Veröffentlicht 23.03.2023 17:15:15
  • Zuletzt bearbeitet 21.11.2024 07:40:35

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insuffici...

6.7

CVE-2022-20930

  • EPSS 0.08%
  • Veröffentlicht 30.09.2022 19:15:13
  • Zuletzt bearbeitet 21.11.2024 06:43:50

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on an affected system. This vulnerability is due to insufficient input validation. An attacker could exploit this...

7.1

CVE-2022-20850

  • EPSS 0.03%
  • Veröffentlicht 30.09.2022 19:15:12
  • Zuletzt bearbeitet 21.11.2024 06:43:41

A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device. This vulnerability is due to insuffici...

5.3

CVE-2022-20844

  • EPSS 0.53%
  • Veröffentlicht 30.09.2022 19:15:11
  • Zuletzt bearbeitet 21.11.2024 06:43:40

A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthenticated, remote attacker to access the GUI of Cisco SD-AVC using a default static username and p...

7.8

CVE-2022-20818

  • EPSS 0.54%
  • Veröffentlicht 30.09.2022 19:15:11
  • Zuletzt bearbeitet 21.11.2024 06:43:36

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could...

7.8

CVE-2022-20775

Exploit
  • EPSS 0.1%
  • Veröffentlicht 30.09.2022 19:15:11
  • Zuletzt bearbeitet 21.11.2024 06:43:31

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could...

7.8

CVE-2022-20716

  • EPSS 0.13%
  • Veröffentlicht 15.04.2022 15:15:13
  • Zuletzt bearbeitet 21.11.2024 06:43:23

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit th...

7.2

CVE-2021-34726

  • EPSS 0.11%
  • Veröffentlicht 23.09.2021 03:15:19
  • Zuletzt bearbeitet 21.11.2024 06:11:03

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system of an affected device. This vulnerability is du...

7.1

CVE-2021-1612

  • EPSS 0.05%
  • Veröffentlicht 23.09.2021 03:15:12
  • Zuletzt bearbeitet 21.11.2024 05:44:44

A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to overwrite arbitrary files on the local system. This vulnerability is due to improper access controls on files within the local file system. An att...