Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Cisco SD-WAN Command Injection Vulnerabilities

🗓️ 20 Jan 2021 16:00:00Reported by CiscoType 
cisco
 cisco🔗 tools.cisco.com👁 71 Views

Cisco SD-WAN Command Injection Vulnerabilities. Authenticated attacker can perform command injection attacks, allowing root privileges on affected devices

Related
Refs
ReporterTitlePublishedViews
Family
BDU FSTEC		The vulnerability of the command-line interface (CLI) of the programmatically defined Cisco SD-WAN network allows a attacker to compromise the confidentiality and integrity of the protected information.
8 Feb 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the command-line interface (CLI) of the programmatically defined Cisco SD-WAN network allows a attacker to gain unauthorized access to protected information.
8 Feb 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the tcpdump tool for capturing and analyzing network traffic in a software-defined Cisco SD-WAN network allows a hacker to elevate their privileges to the root level.
8 Feb 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability in the vManage web interface of the programmatically defined Cisco SD-WAN network allows a attacker to execute arbitrary commands with elevated privileges.
9 Feb 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the vAnalytics function in the programmatically defined Cisco SD-WAN network allows a attacker to compromise data integrity.
9 Feb 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the command-line interface (CLI) of the programmatically defined Cisco SD-WAN network allows a attacker to compromise the confidentiality and integrity of the protected information.
9 Feb 202100:00
–bdu_fstec
Circl		CVE-2021-1261
20 Jan 202122:27
–circl
Circl		CVE-2021-1263
20 Jan 202122:27
–circl
Circl		CVE-2021-1299
20 Jan 202122:27
–circl
Tenable Nessus		Cisco SD-WAN Command Injection Vulnerabilities (cisco-sa-sdwan-cmdinjm-9QMSmgcn)
29 Jun 202100:00
–nessus
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
02 Feb 2021 22:17Current
8.1High risk
Vulners AI Score8.1
EPSS0.02371
ciscosd-wancommand injectionvulnerabilitiesauthenticatedattackerroot privilegessoftware updateadvisory
71