Cisco SD-WAN vManage Software Command Injection Vulnerability

A vulnerability in the remote management feature of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands and potentially gain elevated privileges. The vulnerability is due to improper validation of commands to the remote management CLI of the...

PT-2020-4645 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to improper validation of directory traversal character sequences within requests to application programmatic interfaces APIs. This could allow an...

PT-2020-4642 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN Software affected versions not specified Description: The issue is related to the command-line interface CLI of Cisco SD-WAN Software, where insufficient input validation for specific commands could allow an authenticated, local...

PT-2020-4651 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to improper handling of XML External Entity XXE entries when parsing certain XML files in the web UI of Cisco SD-WAN vManage Software. This could...

Cisco SD-WAN vManage Software Directory Traversal (cisco-sa-vmdirtrav-eFdAxsJg)

According to its self-reported version, Cisco SD-WAN vManage is affected by a directory traversal vulnerability due to a lack of proper validation of files uploaded to the device. An authenticated, remote attacker can exploit this, by uploading a crafted file, to obtain read and write access to...

PT-2020-4644 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: A vulnerability in the system file transfer functions could allow an authenticated, local attacker to gain escalated privileges on the underlying operating system. The...

PT-2020-4650 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to the web-based management interface of the Cisco SD-WAN vManage Software, which does not properly validate user-supplied input. This could allow...

PT-2020-4614 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected...

Cisco SD-WAN vManage Software RCE (cisco-sa-vmanrce-4jtWT28P)

According to its self-reported version, Cisco SD-WAN vManage is affected by a remote code execution vulnerability in its user authentication processing component due to insufficient user input sanitization. An authenticated, remote attacker can exploit this to bypass authentication and execute...

Cisco SD-WAN Solution Software Static Credentials (cisco-sa-sdscred-HfWWfqBj)

A vulnerability exists in Cisco SD-WAN Solution Software due to the device having an account with a default, static password. An unauthenticated, local attacker can exploit this, by using the default credentials, to log in with root privileges. TRUSTED...

5G, Security, IoT, Asavie and Akamai

Malicious actors never seem to rest and have always worked remotely. That simple realization hit home during recent global events. Specifically, Akamai saw an increase in malware traffic of over 400% between March 9, 2020 and May 11, 2020 from corporate devices, most of which were being used...

sd-hk.bplaced.net Cross Site Scripting vulnerability OBB-1454647

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

sd-design.dk Cross Site Scripting vulnerability OBB-1427660

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

sd-tangboli.com Cross Site Scripting vulnerability OBB-1419652

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Cisco SD-WAN Solution Software DoS (cisco-sa-sdw-dos-KWOdyHnB)

A denial of service DoS vulnerability exists in Cisco SD-WAN Solution Software due to improper validation of fields in Cisco SD-WAN peering messages that are encapsulated in UDP packets. An unauthenticated, remote attacker can exploit this issue, by sending crafted UDP messages to the targeted...

CVE-2020-3536

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly...

Cross site scripting

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly...

CVE-2020-3536 Cisco SD-WAN vManage Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly...

CVE-2020-3536

Cisco SD-WAN vManage Web UI is affected by a cross-site scripting (XSS) vulnerability due to improper validation of user input in a specific data field. An authenticated, remote attacker could inject malicious data to execute script code in the user's browser context. Cisco has released software ...

CVE-2020-3536 Cisco SD-WAN vManage Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly...