Cisco

Sd-wan Firmware

41 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.1

CVE-2020-3264

Exploit
  • EPSS 0.14%
  • Veröffentlicht 19.03.2020 16:15:15
  • Zuletzt bearbeitet 21.11.2024 05:30:41

A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability b...

7.8

CVE-2020-3266

  • EPSS 0.18%
  • Veröffentlicht 19.03.2020 16:15:15
  • Zuletzt bearbeitet 21.11.2024 05:30:41

A vulnerability in the CLI of Cisco SD-WAN Solution software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker coul...

8.5

CVE-2019-16012

  • EPSS 6.72%
  • Veröffentlicht 19.03.2020 16:15:14
  • Zuletzt bearbeitet 21.11.2024 04:29:55

A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web UI improperly validates SQL values....

4.8

CVE-2019-16010

  • EPSS 0.24%
  • Veröffentlicht 19.03.2020 16:15:14
  • Zuletzt bearbeitet 21.11.2024 04:29:55

A vulnerability in the web UI of the Cisco SD-WAN vManage software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the vManage software. The vulnerab...

8.8

CVE-2020-3115

  • EPSS 0.14%
  • Veröffentlicht 26.01.2020 05:15:17
  • Zuletzt bearbeitet 21.11.2024 05:30:21

A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to elevate privileges to root-level privileges on the underlying operating system. The vulnerability is due to insufficient input va...

9

CVE-2019-12629

  • EPSS 0.74%
  • Veröffentlicht 26.01.2020 05:15:11
  • Zuletzt bearbeitet 21.11.2024 04:23:13

A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient input valida...

6.5

CVE-2019-12619

  • EPSS 0.26%
  • Veröffentlicht 26.01.2020 05:15:10
  • Zuletzt bearbeitet 21.11.2024 04:23:12

A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation...

6.5

CVE-2019-16002

  • EPSS 0.33%
  • Veröffentlicht 26.11.2019 04:15:12
  • Zuletzt bearbeitet 21.11.2024 04:29:54

A vulnerability in the vManage web-based UI (web UI) of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CS...

5.8

CVE-2019-1951

  • EPSS 0.28%
  • Veröffentlicht 08.08.2019 08:15:12
  • Zuletzt bearbeitet 21.11.2024 04:37:45

A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An...

7.8

CVE-2019-1625

  • EPSS 0.06%
  • Veröffentlicht 20.06.2019 03:15:11
  • Zuletzt bearbeitet 21.11.2024 04:36:57

A vulnerability in the CLI of Cisco SD-WAN Solution could allow an authenticated, local attacker to elevate lower-level privileges to the root user on an affected device. The vulnerability is due to insufficient authorization enforcement. An attacker...