多款Cisco产品命令注入漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. A command injection vulnerability exists in the CLI of Cisco SD-WAN Software. The vulnerability stems from the program not properly validati...

多款Cisco产品命令注入漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. A command injection vulnerability exists in the CLI of Cisco SD-WAN Software that stems from the program not properly validating user input ...

PT-2021-1834 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to insufficient input validation by the web-based management interface, allowing an authenticated, remote attacker to conduct Cypher query languag...

PT-2021-1867 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN products affected versions not specified Description: The issue is related to multiple vulnerabilities in Cisco SD-WAN products that could allow an authenticated attacker to perform command injection attacks against an affected...

PT-2021-1863 · Cisco · Cisco Sd-Wan Vedge +1

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vEdge versions affected versions not specified Description: The issue is related to a buffer overflow in the memory of Cisco SD-WAN vEdge router microcode, which could allow a remote attacker to cause a denial of service DoS. An...

PT-2021-1866 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN products affected versions not specified Description: The issue concerns multiple vulnerabilities in Cisco SD-WAN products that could allow an authenticated attacker to perform command injection attacks against an affected device...

Unbreakable Enterprise kernel security update

5.4.17-2036.102.0.2uek - xen-blkback: set ring-xenblkd to NULL after kthreadstop Pawel Wieczorkiewicz Orabug: 32260252 CVE-2020-29569 - xenbus/xenbusbackend: Disallow pending watch messages SeongJae Park Orabug: 32253409 CVE-2020-29568 - xen/xenbus: Count pending messages for each watch SeongJae...

Zyxel SD-OS chg_exp_pwd Input Validation Vulnerability

Zyxel SD-OS is an operating system for network configuration applications. Zyxel SD-OS chgexppwd suffers from an input validation vulnerability that can be exploited by a remote attacker to submit a special request that can be injected with arbitrary commands and executed...

Zyxel ZLD和Zyxel SD-OS 命令注入漏洞

Zyxel SD-OS is an operating system for network configuration applications. Zyxel SD-OS chgexppwd suffers from an input validation vulnerability that can be exploited by a remote attacker to submit a special request that can be injected with arbitrary commands and executed...

SUSE SLES15 Security Update : u-boot (SUSE-SU-2020:3283-1)

This update for u-boot fixes the following issues : Fix network boot on Raspberry Pi 3 B+ bsc1098649 Fix GOP pixel format bsc1098447 Fix SD writes on Raspberry Pi Enable a few more armv7 boards to boot with EFI Fix potentially miscompiled runtime service calls Fix CVE-2019-14192 bsc1143777,...

VulnCheck KEV: CVE-2019-12989

Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection...

VulnCheck KEV: CVE-2019-12991

Authenticated Command Injection in Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance...

CVE-2020-3985

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 allows an access to set arbitrary authorization levels leading to a privilege escalation issue. An authenticated SD-WAN Orchestrator user may exploit an application weakness and call a vulnerable API to elevate their...

CVE-2020-3985

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 allows an access to set arbitrary authorization levels leading to a privilege escalation issue. An authenticated SD-WAN Orchestrator user may exploit an application weakness and call a vulnerable API to elevate their...

CVE-2020-4003

VMware SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 was found to be vulnerable to SQL-injection attacks allowing for potential information disclosure. An authenticated SD-WAN Orchestrator user may inject code into SQL queries which may lead to...

CVE-2020-3984

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct input validation which allows for SQL-injection. An authenticated SD-WAN Orchestrator user may exploit a vulnerable API call using specially crafted SQL queries which may lead to unauthorized data acce...

CVE-2020-4000

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 allows for executing files through directory traversal. An authenticated SD-WAN Orchestrator user is able to traversal directories which may lead to code execution of files...

CVE-2020-4001

The SD-WAN Orchestrator 3.3.2, 3.4.x, and 4.0.x has default passwords allowing for a Pass-the-Hash Attack. SD-WAN Orchestrator ships with default passwords for predefined accounts which may lead to to a Pass-the-Hash attack...

CVE-2020-4001

The SD-WAN Orchestrator 3.3.2, 3.4.x, and 4.0.x has default passwords allowing for a Pass-the-Hash Attack. SD-WAN Orchestrator ships with default passwords for predefined accounts which may lead to to a Pass-the-Hash attack...

CVE-2020-3984

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct input validation which allows for SQL-injection. An authenticated SD-WAN Orchestrator user may exploit a vulnerable API call using specially crafted SQL queries which may lead to unauthorized data acce...