6321 matches found
Cisco SD-WAN vManage Software XSS (cisco-sa-vmanxss1-XhJCymBt)
According to its self-reported version, Cisco SD-WAN vManage is affected by a cross-site scripting XSS vulnerability in the web-based management interface due to not properly validating user-supplied input. An authenticated, remote attacker can exploit this, by convincing a user to click a...
Cisco SD-WAN vManage Software XXE (cisco-sa-vmanx3-vrZbOqqD)
According to its self-reported version, Cisco SD-WAN vManage is affected by an XML external entity XXE vulnerability due to an incorrectly configured XML parser accepting XML external entities from an untrusted source. An authenticated, remote attacker can exploit this, via specially crafted XML...
Cisco SD-WAN Software Privilege Escalation (cisco-sa-vepeshlg-tJghOQcA)
According to its self-reported version, Cisco SD-WAN Software is affected by a privilege escalation vulnerability due to insufficient security controls on the CLI. An authenticated, local attacker can exploit this, by using an affected CLI utility, to gain root privileges. Please see the included...
Cisco SD-WAN vManage Software XSS (cisco-sa-vmanxss2-ugJyqxWF)
According to its self-reported version, Cisco SD-WAN vManage is affected by a cross-site scripting XSS vulnerability in the web-based management interface due to not properly validating user-supplied input. An authenticated, remote attacker can exploit this, by convincing a user to click a...
Cisco IOS XE SD-WAN Software Packet Filtering Bypass (cisco-sa-cedge-filt-bypass-Y6wZMqm4)
According to its self-reported version, Cisco SD-WAN Solution is affected by a packet filtering bypass vulnerability. The vulnerability is due to improper traffic filtering conditions on an affected device. An unauthenticated, remote attacker could exploit this vulnerability by crafting a malicio...
VMware Releases Security Updates for VMware SD-WAN Orchestrator
VMware has released security updates to address multiple vulnerabilities in VMware SD-WAN Orchestrator. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to...
Vmware VMWare SD-WAN Orchestrator Path Traversal Vulnerability
Vmware VMWare SD-WAN Orchestrator is a software from Vmware that orchestrates network data flows in a software-defined network architecture. The software provides Web pages to visualize and manage users, gateways, and authentication. A path traversal vulnerability exists in VMware SD-WAN...
VMWare SD-WAN Orchestrator Trust Management Issue Vulnerability
Vmware VMWare SD-WAN Orchestrator is a software from Vmware that orchestrates network data flows in a software-defined network architecture. The software provides Web pages to visualize and manage users, gateways, and authentication. A security vulnerability exists in VMware SD-WAN Orchestrator...
VMWare SD-WAN Orchestrator SQL Injection Vulnerability
Vmware VMWare SD-WAN Orchestrator is a software from Vmware that orchestrates network data flows in a software-defined network architecture. The software provides Web pages to visualize and manage users, gateways, and authentication. An SQL injection vulnerability exists in VMware SD-WAN...
VMware SD-WAN Orchestrator updates address multiple security vulnerabilities (CVE-2020-3984, CVE-2020-3985, CVE-2020-4000, CVE-2020-4001, CVE-2020-4002 ,CVE-2020-4003)
3a. SQL injection vulnerability due to improper input validation CVE-2020-3984 The SD-WAN Orchestrator does not apply correct input validation which allows for SQL-injection. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of...
The vulnerability in the web-based management interface of Cisco SD-WAN allows a attacker to execute cross-site attacks.
The vulnerability in the Cisco SD-WAN programmatically-defined network management web interface is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...
The vulnerability in the web-based management interface of Cisco SD-WAN allows a attacker to execute cross-site attacks.
The vulnerability in the Cisco SD-WAN programmatically-defined network management web interface is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...
Cisco SD-WAN Software Privilege Escalation (cisco-sa-vepestd-8C3J9Vc)
According to its self-reported version, Cisco SD-WAN is affected by a privilege escalation vulnerability exists due to insufficient input validation. An authenticated, local attacker can exploit this by sending crafted options to a specific command, to gain root access to the system. TRUSTED...
Citrix SD-WAN Center Remote Code Execution (CVE-2020-8271)
A remote code execution vulnerability exists in Citrix SD-WAN. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
The vulnerability of the command-line interface (CLI) of the programmatically defined Cisco SD-WAN network allows a attacker to increase their privileges.
The vulnerability of the command-line interface CLI of Cisco SD-WAN software-defined networks is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the programmatically defined Cisco SD-WAN network, related to deficiencies in access segmentation, allows a intruder to enhance their privileges.
The vulnerability of the programmatically defined Cisco SD-WAN network is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the programmatically defined Cisco SD-WAN, related to incorrect restrictions on path names to the restricted access directory, allows a intruder to compromise the integrity of protected information.
The vulnerability of the programmatically defined Cisco SD-WAN network is related to incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...
Citrix SD-WAN Bugs Allow Remote Code Execution
Three security bugs in the Citrix software-defined SD-WAN platform would allow remote code-execution and network takeover, according to researchers. The flaws affect the Citrix SD-WAN Center in versions before 11.2.2, 11.1.2b and 10.2.8. They consist of an unauthenticated path traversal and shell...
