6569 matches found
The vulnerability of the command-line interface (CLI) of the programmatically defined Cisco SD-WAN network allows a attacker to increase their privileges.
The vulnerability of the command-line interface CLI of Cisco SD-WAN software-defined networks is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the programmatically defined Cisco SD-WAN, related to incorrect restrictions on path names to the restricted access directory, allows a intruder to compromise the integrity of protected information.
The vulnerability of the programmatically defined Cisco SD-WAN network is related to incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...
The vulnerability of the programmatically defined Cisco SD-WAN network, related to deficiencies in access segmentation, allows a intruder to enhance their privileges.
The vulnerability of the programmatically defined Cisco SD-WAN network is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Citrix SD-WAN Bugs Allow Remote Code Execution
Three security bugs in the Citrix software-defined SD-WAN platform would allow remote code-execution and network takeover, according to researchers. The flaws affect the Citrix SD-WAN Center in versions before 11.2.2, 11.1.2b and 10.2.8. They consist of an unauthenticated path traversal and shell...
CVE-2020-8271
Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...
CVE-2020-8273
Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8...
CVE-2020-8272
Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...
CVE-2020-8273
Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8...
CVE-2020-8271
Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...
CVE-2020-8272
Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...
CVE-2020-8271
Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...
Remote code execution
Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...
Authentication flaw
Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...
Privilege escalation
Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8...
CVE-2020-8273
CVE-2020-8273 is a CreateAzureDeployment shell injection flaw in Citrix SD-WAN Center. An authenticated attacker can craft JSON data that is (improperly) concatenated into an exec call, enabling arbitrary command execution on vulnerable installations. Affected versions are pre-11.2.2, pre-11.1.2b...
CVE-2020-8273
Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8...
CVE-2020-8272
CVE-2020-8272 is a ConfigEditor authentication bypass vulnerability in Citrix SD-WAN Center, exposing SD-WAN functionality. Affected are SD-WAN Center versions prior to 11.2.2, 11.1.2b, and 10.2.8. The connected ThreatPost entry confirms an unauthenticated bypass of authentication (ConfigEditor) ...
CVE-2020-8272
Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...
CVE-2020-8271
Citrix SD-WAN Center contains CVE-2020-8271, an unauthenticated remote code execution affecting versions before 11.2.2, 11.1.2b, and 10.2.8. The issue is a stop_ping endpoint path traversal that can lead to arbitrary shell commands via user-controlled input, enabling root-level RCE without authen...