CVE-2019-1973

A vulnerability in the web portal framework of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to improper input validation of log file...

The vulnerability in the software-defined Cisco SD-WAN web interface, related to insufficient validation of input data, allows a malicious actor to execute arbitrary commands with root privileges.

The vulnerability of the software-defined Cisco SD-WAN Web UI is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands with root privileges...

CVE-2019-1626

A vulnerability in the vManage web-based UI Web UI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected vManage device. The vulnerability is due to a failure to properly authorize certain user actions in the device configuration. An...

Cisco SD-WAN Solution Privilege Permission and Access Control Issues Vulnerability (CNVD-2019-25711)

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco. the CLI is a command line interface. A privilege-granting and access control issue vulnerability exists in the CLI in Cisco SD-WAN Solution versions 18.3.6, 18.4.1, and 19.1.0, which can be exploited by a local attacker t...

PT-2019-2212 · Cisco · Cisco Nx-Os +1

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: The issue is related to incorrect verification of cryptographic signatures in the Image Signature Verification feature of Cisco NX-OS Software. This could allow an authenticate...

CVE-2019-1754

A vulnerability in the authorization subsystem of Cisco IOS XE Software could allow an authenticated but unprivileged level 1, remote attacker to run privileged Cisco IOS commands by using the web UI. The vulnerability is due to improper validation of user privileges of web UI users. An attacker...

CVE-2019-1752

A vulnerability in the ISDN functions of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect processing of specific values in the Q.931 information elements. An attacker could exploit thi...

CVE-2019-1741

A vulnerability in the Cisco Encrypted Traffic Analytics ETA feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a logic error that exists when handling a malformed incoming packet, leading to...

CVE-2019-1742

A vulnerability in the web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access sensitive configuration information. The vulnerability is due to improper access control to files within the web UI. An attacker could exploit this vulnerability by sending a malicious...

CVE-2019-1740

A vulnerability in the Network-Based Application Recognition NBAR feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability are due to a parsing issue on DNS packets. An attacker could exploit...

CVE-2019-1737

A vulnerability in the processing of IP Service Level Agreement SLA packets by Cisco IOS Software and Cisco IOS XE software could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual denial of service DoS condition on the affected device. The vulnerability is due ...

The vulnerability of the NX-API network operating system function in Cisco NX-OS devices allows a hacker to execute arbitrary code with superuser privileges.

The vulnerability of the NX-API network operating system function in Cisco NX-OS devices is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code with superuser privileges...

The vulnerability of the vContainer component in the programmatically defined Cisco SD-WAN network allows a attacker to trigger a service failure or execute arbitrary code with root privileges.

The vulnerability of the vContainer component in the programmatically defined Cisco SD-WAN network is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code with root privileges by sending a specially crafted file...

CVE-2018-15428

A vulnerability in the implementation of Border Gateway Protocol BGP functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incorrect processing of certain BGP update messages. An attacker coul...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2018-20694)

Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices. A resource management error vulnerability exists in the implementation of the Cisco Discovery Protocol feature in Cisco IOS Software and IOS XE Software, which arises from a failure of th...

Cisco SD-WAN Solution Remote Command Injection Vulnerability

Cisco vBond Orchestrator Software and other products are from Cisco. cisco vBond Orchestrator Software is a set of security network extension management software. vEdge 100 Series Routers is a 100 series router product. SD-WAN Solution is a set of network extension solution running in it. A comma...

Cisco SD-WAN Solution Remote Command Injection Vulnerability (CNVD-2018-14074)

Cisco vBond Orchestrator Software and other products are from Cisco. cisco vBond Orchestrator Software is a set of security network extension management software. vEdge 100 Series Routers is a 100 series router product. SD-WAN Solution is a set of network extension solution running in it. A comma...

CVE-2018-0344

A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient...

PT-2018-3907 · Cisco · Cisco Fxos +2

Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software versions prior to the fixed version Cisco NX-OS Software versions prior to the fixed version Description: A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an...

Cisco IOS Software Authentication Bypass Vulnerability

Cisco IOS Software is a set of operating systems developed by Cisco for its network devices. An authentication bypass vulnerability exists in the 802.1x multiple-authentication multi-auth feature in Cisco IOS Software. An attacker can exploit this vulnerability by accessing the 802.1x...