Cisco SD-WAN vManage Software Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system. For more information about these vulnerabilities, see the Details...

PT-2021-2546 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to errors in access control, which could allow an attacker to modify any user account. It may also enable an unauthenticated, remote attacker to...

Cisco SD-WAN vManage Software 输入验证错误漏洞

Cisco?SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. A security vulnerability exists in Cisco?SD-WAN vManage Software that could be exploited by an unauthenticated, remote attacker to execute...

Cisco SD-WAN vManage Software 缓冲区错误漏洞

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A buffer overflow vulnerability exists in Cisco SD-WAN vManage Software. The vulnerability stems from the program not properly validating user input. An attacker could exploi...

The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface allows attackers to compromise the integrity of protected information.

The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface relates to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a attacker to compromise the integrity of the protected information...

The vulnerability of the Role-Based Access Control (RBAC) access control function in Cisco IOS XE SD-WAN software allows a attacker to increase their privileges.

The vulnerability of the Role-Based Access Control RBAC access control function in Cisco IOS XE SD-WAN software is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges by connecting only to the console port and accessing t...

Cisco IOS XE Software SD WAN vDaemon DoS (cisco-sa-iosxe-sdwdos-4zeEeC9w)

According to its self-reported version, Cisco IOS XE SD-WAN Software is affected by a denial of service vulnerability due to insufficient handling of malformed packets. An unauthenticated, remote attacker can exploit this by sending crafted traffic to an affected device, which could allow the...

CVE-2020-19642

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card...

Design/Logic Flaw

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card...

CVE-2020-19642

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card...

PT-2024-11072 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A resource leak has been identified in the Linux kernel, specifically in the remove function of the mmc: uniphier-sd module. The issue arises from a missing tmio mmc host free call in...

Citrix SD-WAN Center Remote Code Execution (direct check)

Binary data citrixsdwanCVE-2020-8271.nbin...

Cisco IOS XE elevation of privilege vulnerability (CNVD-2021-22458)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An elevation of privilege vulnerability exists in the CLI management for SD-WAN in Cisco IOS XE. The vulnerability stems from a problem with the way the software handles concurren...

Cisco IOS XE Path Traversal Vulnerability (CNVD-2021-22913)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A path traversal vulnerability exists in the CLI for SD-WAN in Cisco IOS XE. The vulnerability stems from insufficient validation of user-supplied input. An attacker could exploit...

Cisco IOS XE elevation of privilege vulnerability (CNVD-2021-22457)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An elevation of privilege vulnerability exists in role-based access control for SD-WAN in Cisco IOS XE. The vulnerability stems from the use of a default configuration for console...

Cisco IOS XE Buffer Overflow Vulnerability

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A buffer overflow vulnerability exists in the vDaemon process for SD-WAN on Cisco IOS XE. The vulnerability stems from insufficient boundary checking when the device processes...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-22166)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in the vDaemon process for SD-WAN in Cisco IOS XE. The vulnerability stems from insufficient handling of malformed packets. An attacker...

Cisco IOS XE Arbitrary Command Execution Vulnerability (CNVD-2021-22184)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An arbitrary command execution vulnerability exists in the CLI for SD-WAN in Cisco IOS XE. The vulnerability stems from insufficient validation of user-supplied input. An attacker...

Cisco IOS XE Software SD WAN Privilege Escalation (cisco-sa-sdwan-clipriv-9TO2QGVp)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

CVE-2021-1281

A vulnerability in CLI management in Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system as the root user. This vulnerability is due to the way the software handles concurrent CLI sessions. An attacker could exploit this vulnerabilit...