CVE-2021-1260 Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see...

CVE-2021-1261

Cisco SD-WAN Command Injection Vulnerabilities (CVE-2021-1261) affect Cisco SD-WAN (Viptela) devices via input validation issues in the tcpdump utility. An authenticated, local attacker can inject commands, potentially executing with root privileges on the affected device. Several connected sourc...

CVE-2021-1261 Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see...

CVE-2021-1261 Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see...

CVE-2021-1262

CVE-2021-1262 concerns multiple command-injection vulnerabilities in Cisco SD-WAN products. An authenticated attacker could exploit these flaws to run commands on an affected device with root privileges . The CVE is discussed across multiple sources (including Cisco’s advisory), which confirms a ...

CVE-2021-1262 Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see...

CVE-2021-1263 Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see...

CVE-2021-1263

CVE-2021-1263 relates to multiple command‑injection vulnerabilities in Cisco SD‑WAN products. The connected sources confirm that an authenticated attacker could exploit the CLI to execute commands with root privileges on the device, compromising confidentiality, integrity, and potentially availab...

CVE-2021-1263 Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see...

CVE-2021-1273

Cisco SD-WAN Denial of Service (DoS) vulnerabilities documented under CVE-2021-1273 affect Cisco SD-WAN software, including DoS through IPsec tunnel management and a UDP vDaemon null-dereference which can be exploited by unauthenticated remote attackers via crafted packets. The available sources ...

CVE-2021-1273 Cisco SD-WAN Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service DoS attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1273 Cisco SD-WAN Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service DoS attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1274 Cisco SD-WAN Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service DoS attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1274 Cisco SD-WAN Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service DoS attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1274

CVE-2021-1274 describes a DoS weakness in Cisco SD-WAN software caused by a null dereference in vDaemon affecting UDP connection responses. Unauthenticated remote attackers can trigger a reboot/DoS by sending crafted traffic to affected devices. The vulnerability is associated with Cisco SD-WAN p...

CVE-2021-1278

CVE-2021-1278 is part of Cisco SD‑WAN DoS vulnerabilities affecting multiple Cisco SD‑WAN products. The connected sources indicate an unauthenticated, remote attacker can cause denial of service on affected devices (e.g., reboot or DoS) via the vulnerability set described in Cisco advisory Cisco ...

CVE-2021-1278 Cisco SD-WAN Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service DoS attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1278 Cisco SD-WAN Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service DoS attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1279

CVE-2021-1279 describes DoS vulnerabilities in Cisco SD-WAN products where an unauthenticated, remote attacker can crash/restart affected devices. The root cause cited is insufficient input validation in the SNMPv3 protocol implementation. Covered products include Cisco SD‑WAN edge devices and re...

CVE-2021-1279 Cisco SD-WAN Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service DoS attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...