CVE-2021-1279 Cisco SD-WAN Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service DoS attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1298 Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see...

CVE-2021-1298 Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see...

CVE-2021-1298

CVE-2021-1298 maps to multiple Cisco SD-WAN command injection vulnerabilities. The root cause is improper input validation in Cisco SD-WAN components allowing an authenticated attacker to execute commands with root privileges on affected devices. Affected products include Cisco SD-WAN solutions (...

CVE-2021-1299 Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see...

CVE-2021-1299 Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see...

CVE-2021-1299

CVE-2021-1299 refers to multiple command-injection flaws in Cisco SD-WAN product lines (notably SD-WAN vManage). The root cause is improper input validation in the device template configuration, allowing an authenticated attacker to inject commands and execute them with root privileges on the aff...

CVE-2021-1300 Cisco SD-WAN Buffer Overflow Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1300

CVE-2021-1300 corresponds to Cisco SD-WAN Buffer Overflow vulnerabilities. Connected sources indicate multiple buffer-overflow flaws in Cisco SD-WAN products that could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges by crafting IP traffic or abusing IP ha...

CVE-2021-1300 Cisco SD-WAN Buffer Overflow Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1301 Cisco SD-WAN Buffer Overflow Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1301

Cisco SD-WAN Buffer Overflow Vulnerabilities (CVE-2021-1301) affect Cisco SD-WAN products. The issues allow an unauthenticated, remote attacker to execute attacks against an affected device due to multiple buffer overflow vulnerabilities. CVSSv3.1 score is 9.8 (CRITICAL) with NETWORK attack vecto...

CVE-2021-1301 Cisco SD-WAN Buffer Overflow Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1302

Cisco SD-WAN vManage Security Advisory details a set of authorization bypass vulnerabilities in the web-based management interface. An authenticated remote attacker can bypass authorization to modify configurations and access sensitive information not authorized for their tenant. Affected product...

CVE-2021-1302 Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not...

CVE-2021-1302 Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not...

CVE-2021-1304

Cisco SD-WAN vManage web-based management interface contains authorization bypass vulnerabilities (CVE-2021-1304). An authenticated, remote attacker can bypass authorization to modify configurations and access sensitive information they are not authorized to view. Root cause cited in public advis...

CVE-2021-1304 Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not...

CVE-2021-1304 Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not...

Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct Cypher query language injection attacks on an affected system. The vulnerability is due to insufficient input validation by the web-based management...