CVE-2021-34700

CVE-2021-34700 affects Cisco SD-WAN vManage Software. A vulnerability in the CLI interface allows an authenticated, local attacker to read arbitrary files from the underlying file system due to insufficient access control. An exploit could enable forged authentication requests and unauthorized ac...

Cisco SD-WAN vManage Software Information Disclosure Vulnerability (CNVD-2021-68733)

Cisco SD-WAN Solution is a set of network extension solutions from Cisco, of which vManage is the console. vManage Software for Cisco SD-WAN is vulnerable to an information disclosure vulnerability that could be exploited by an attacker to read arbitrary files on the underlying file system of the...

CVE-2021-34700

A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read arbitrary files on the underlying file system of an affected system. This vulnerability exists because access to sensitive information on an affected system is not sufficient...

Cisco SD-WAN Software Information Disclosure Vulnerability

A vulnerability in the Multiprotocol Label Switching MPLS packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to gain access to information stored in MPLS buffer memory. This vulnerability is due to insufficient handling of malformed MPLS packets that...

Cisco SD-WAN vManage Software Information Disclosure Vulnerability

A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read arbitrary files on the underlying file system of an affected system. This vulnerability exists because access to sensitive information on an affected system is not sufficient...

Cisco SD-WAN vManage Software Information Disclosure (cisco-sa-sdwan-vmanage-infdis-LggOP9sE)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Cisco SD-WAN Software Information Disclosure (cisco-sa-sdw-mpls-infodisclos-MSSRFkZq)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Citrix Releases Security Updates 

Citrix has released security updates to address multiple vulnerabilities in Application Delivery Controller, Gateway, and SD-WAN WANOP Edition. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Citrix...

Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP Edition appliance Security Update

Multiple vulnerabilities have been discovered in Citrix ADCformerlyknown asNetScaler ADCandCitrix Gateway formerlyknown asNetScaler Gateway,and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO.These vulnerabilities,if exploited,could result in the following security issue...

Cisco IOS XE Software SD WAN Console Privilege Escalation (cisco-sa-sdwan-esc-rSNVvTf9)

A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker with read-only privileges to obtain administrative privileges by using the console port when the device is in the default SD-WAN configuration. This vulnerability occurs...

Cisco IOS XE Software SD WAN Arbitrary Command Execution (cisco-sa-iosxe-sdwarbcmdexec-sspOMUr3)

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the root user. The attacker must be authenticated on the affected device as a low-privileged user to exploit this...

Cisco SD-WAN Software Privilege Escalation (cisco-sa-vepegr-4xynYLUj)

According to its self-reported version, Cisco SD-WAN Software is affected by a privilege escalation vulnerability due to incorrect permissions being set when the affected command is executed. An authenticated, local attacker can exploit this in order to gain root privileges. Note that Nessus has...

Cisco SD-WAN vManage Software Path Traversal (cisco-sa-vman-pathtrav-Z5mCVsjf)

According to its self-reported version, Cisco SD-WAN vManage Software is affected by a vulnerability in the web-based management interface due to insufficient validation of HTTP requests. An authenticated, remote attacker can exploit this, by sending crafted HTTP requests, in order to conduct pat...

Cisco SD-WAN vManage Software Privilege Escalation (cisco-sa-sdwan-privesc-vman-kth3c82B)

According to its self-reported version, Cisco SD-WAN vManage Software is affected by a vulnerability due to incorrect privilege assignment. An authenticated, local attacker can exploit this to elevate their privileges from Administrator to root by creating a malicious file. Note that Nessus has n...

Cisco SD-WAN Command Injection Vulnerabilities (cisco-sa-sdwan-cmdinjm-9QMSmgcn)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by multiple vulnerabilities that allow an authenticated attacker to inject commands and take actions with root privileges. Note that Nessus has not tested for this issue but has instead relied only on the...

Command Execution Vulnerability in SD-WAN of Beijing Tianchi Network Co.

Skychase Networks is a value-added telecom service provider in China. A command execution vulnerability exists in the SD-WAN of Beijing Tianchi Network Co. Ltd. that can be exploited by an attacker to gain control of a server...

Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities (cisco-sa-sdwan-buffover-MWGucjtO)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by multiple vulnerabilities. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Cisco SD-WAN Software vDaemon DOS (cisco-sa-sdwan-dos-Ckn5cVqW)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Weak Password Vulnerability in DH-SD-6A9226F-HNI of Zhejiang Dahua Stock Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a leading supplier and solution provider of surveillance products. Zhejiang Dahua Technology Co., Ltd DH-SD-6A9226F-HNI has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Citrix SD-WAN Center Test Build Network DoS (CTX297155)

The remote Citrix SD-WAN Center is version 10.2.x prior to 10.2.9a, 11.1.x prior to 11.1.2c, 11.2.x prior to 11.2.3a, or 11.2.x prior to 11.3.1a. It is, therefore, vulnerable to a Network-based denial-of-service from an attacker within the same Layer 2 network segment. Note that Nessus has not...