CVE-2021-1589
- EPSS 0.36%
- Veröffentlicht 23.09.2021 03:15:11
- Zuletzt bearbeitet 21.11.2024 05:44:41
A vulnerability in the disaster recovery feature of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain unauthorized access to user credentials. This vulnerability exists because access to API endpoints is not properly...
CVE-2021-1614
- EPSS 0.54%
- Veröffentlicht 22.07.2021 16:15:08
- Zuletzt bearbeitet 21.11.2024 05:44:44
A vulnerability in the Multiprotocol Label Switching (MPLS) packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to gain access to information stored in MPLS buffer memory. This vulnerability is due to ins...
CVE-2020-3595
- EPSS 0.03%
- Veröffentlicht 06.11.2020 19:15:15
- Zuletzt bearbeitet 21.11.2024 05:31:22
A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root group on the underlying operating system. The vulnerability is due to incorrect permissions being set when the affected command is exe...
CVE-2020-3600
- EPSS 0.04%
- Veröffentlicht 06.11.2020 19:15:15
- Zuletzt bearbeitet 21.11.2024 05:31:23
A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient security controls on the CLI. An attacker could exploit t...
CVE-2020-3594
- EPSS 0.04%
- Veröffentlicht 06.11.2020 19:15:15
- Zuletzt bearbeitet 21.11.2024 05:31:22
A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerab...
CVE-2020-3593
- EPSS 0.04%
- Veröffentlicht 06.11.2020 19:15:15
- Zuletzt bearbeitet 21.11.2024 05:31:22
A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerab...
CVE-2020-27128
- EPSS 2.42%
- Veröffentlicht 06.11.2020 19:15:13
- Zuletzt bearbeitet 21.11.2024 05:20:45
A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to write arbitrary files to an affected system. The vulnerability is due to improper validation of requests to APIs. An a...
CVE-2020-3536
- EPSS 0.16%
- Veröffentlicht 08.10.2020 05:15:14
- Zuletzt bearbeitet 21.11.2024 05:31:16
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the ...
- EPSS 1.99%
- Veröffentlicht 31.07.2020 00:15:12
- Zuletzt bearbeitet 21.11.2024 05:30:54
A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerabilit...
CVE-2020-3374
- EPSS 0.11%
- Veröffentlicht 31.07.2020 00:15:12
- Zuletzt bearbeitet 21.11.2024 05:30:54
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization, enabling them to access sensitive information, modify the system configuration, or impact th...