Input validation

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affected system. This vulnerability is due to improper validation of parameters that are sent to the web UI. An attacker could exploit this vulnerabilit...

CVE-2023-20261

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affected system. This vulnerability is due to improper validation of parameters that are sent to the web UI. An attacker could exploit this vulnerabilit...

CVE-2023-20261

Cisco Catalyst SD-WAN Manager web UI Local File Inclusion (CVE-2023-20261) allows an authenticated remote attacker to read arbitrary files from the underlying Linux filesystem by abusing improper validation of parameters in the web UI. Affected component is the web UI of Cisco Catalyst SD-WAN Man...

CVE-2023-20261

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affected system. This vulnerability is due to improper validation of parameters that are sent to the web UI. An attacker could exploit this vulnerabilit...

Cisco Catalyst SD-WAN Manager Local File Inclusion Vulnerability

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affected system. This vulnerability is due to improper validation of parameters that are sent to the web UI. An attacker could exploit this vulnerabilit...

CVE-2023-45862

An out-of-bounds memory access flaw was found in the Linux kernel ENE SD/MS Card reader driver. This issue occurs when using a malicious USB device, which could allow a local user to crash the system. Mitigation To mitigate this issue, prevent module ums-eneub6250 from being loaded. Please see...

Cisco Catalyst SD-WAN Manager Local File Inclusion (cisco-sa-sdwan-lfi-OWLbKUGe)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affected system. This vulnerability is due to...

CVE-2023-43776

Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card .PRG file ending...

Access Control Error Vulnerability in Cisco SD-WAN vManage

Cisco SD-WAN vManage is a highly customizable dashboard from Cisco, Inc. that simplifies and automates the deployment, configuration, management, and operation of Cisco SD-WAN. An access control error vulnerability exists in Cisco SD-WAN vManage that stems from improperly enforced access control ...

Cisco Catalyst SD-WAN Manager HTML Injection Vulnerability

Cisco Catalyst is a series of switches from the American company Cisco. An HTML injection vulnerability exists in Cisco Catalyst SD-WAN Manager that stems from improper validation of user-supplied data in element fields and can be exploited by an authenticated, remote attacker to inject HTML...

Cisco Catalyst SD-WAN Manager Authorization Bypass Vulnerability

Cisco Catalyst SD-WAN Manager is an SD-WAN network management program from Cisco USA. A security vulnerability exists in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature, which can be exploited by a remote attacker to submit a special request for unauthorize...

The vulnerability of the Elasticsearch search system in the Cisco Catalyst SD-WAN Manager (formerly Cisco SD-WAN vManage) centralized network management system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Elasticsearch search system in the Cisco Catalyst SD-WAN Manager formerly Cisco SD-WAN vManage centralized network management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protecte...

The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager, related to deficiencies in authentication procedures, allows a perpetrator to trigger a service failure.

The vulnerability of the centralized network management system, Cisco Catalyst SD-WAN Manager, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the SSH service in the Cisco Catalyst SD-WAN Manager centralized network management system allows a attacker to cause a service failure.

The vulnerability of the SSH service in the Cisco Catalyst SD-WAN Manager centralized network management system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Cisco Warns of Vulnerability in IOS and IOS XE Software After Exploitation Attempts

Cisco is warning of attempted exploitation of a security flaw in its IOS Software and IOS XE Software that could permit an authenticated remote attacker to achieve remote code execution on affected systems. The medium-severity vulnerability is tracked as CVE-2023-20109, and has a CVSS score of 6....

The vulnerability of the application-specific SAML interface of the Cisco Catalyst SD-WAN Manager centralized network management system allows a perpetrator to gain access to the application.

The vulnerability of the application software interface for the Single Sign-On module of the Cisco Catalyst SD-WAN Manager centralized network management system is related to errors during authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to the...

Unpatched Cisco Catalyst SD-WAN Manager Systems Exposed to DoS Attacks

By Deeba Ahmed Cisco Releases Security Patches for Critical Vulnerabilities in Catalyst SD-WAN Manager. This is a post from HackRead.com Read the original post: Unpatched Cisco Catalyst SD-WAN Manager Systems Exposed to DoS Attacks...

Cisco Catalyst SD-WAN Manager Unauthorized Access Vulnerability

Cisco vManage is a highly customizable control panel that simplifies and automates Cisco SD-WAN deployment, configuration, management and operations. An unauthorized access vulnerability exists in Cisco Catalyst SD-WAN Manager in versions 20.9.3.2 and 20.11.1.2. The vulnerability is due to failur...

Cisco Catalyst SD-WAN Manager Web UI HTML Injection (cisco-sa-vmanage-html-3ZKh8d6x)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD- WAN vManage, could allow an authenticated, remote attacker to inject HTML content. Thi...

CVE-2023-20254

A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow an authenticated, remote attacker to access another tenant that is being managed by the same Cisco Catalyst SD-WAN Manager instance. This vulnerability requires the multi-tenant...