Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not...

Cisco SD-WAN vManage Software Path Traversal Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain write access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP...

Cisco SD-WAN vManage Information Disclosure Vulnerability

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read sensitive database files on an affected system. The vulnerability is due to insufficient user authorization. An attacker could exploit this vulnerability by accessing the vshell of an...

Cisco SD-WAN vManage Software 安全漏洞

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. A Cypher query language injection vulnerability exists in the Web management interface of Cisco SD-WAN vManage versions prior to 20.3.2, which can be exploited by an attacker to obtain...

PT-2021-1858 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue exists due to insufficient input validation in the web-based management interface of Cisco SD-WAN vManage Software. This could allow a remote attacker to...

Cisco SD-WAN vManage Software 输入验证错误漏洞

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An authorization bypass vulnerability exists in the web management interface of Cisco SD-WAN vManage. The vulnerability stems from insufficient authorization checking of user account...

多款 Cisco SD-WAN 产品缓冲区错误漏洞

The Cisco SD-WAN vEdge is a router from Cisco, Inc. that provides basic WAN and security and multi-cloud capabilities for Cisco SD-WAN solutions. This device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions.Cisco SD-WAN vManage is software from Cisco that...

PT-2021-1857 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue concerns multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software. An authenticated, remote attacker could bypass...

Cisco SD-WAN vManage Software 输入验证错误漏洞

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An authorization bypass vulnerability exists in the web management interface of Cisco SD-WAN vManage, which can be exploited by an attacker by sending a specially crafted HTTP request to...

Cisco SD-WAN Buffer Error Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Networking solutions from Cisco USA. A security vulnerability exists in Cisco SD-WAN products that allows an unauthenticated, remote attacker to perform a denial-of-service DoS attack on an affected devic...

Cisco SD-WAN products 缓冲区错误漏洞

The Cisco SD-WAN vEdge is a router from Cisco, Inc. that provides basic WAN and security and multi-cloud capabilities for Cisco SD-WAN solutions. This device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions.Cisco SD-WAN vManage is software from Cisco that...

Cisco SD-WAN vManage Software 输入验证错误漏洞

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An authorization bypass vulnerability exists in the SSH console of the Web management interface of Cisco SD-WAN vManage, which can be exploited by an attacker to access sensitive informati...

PT-2021-1865 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN products affected versions not specified Description: The issue is related to multiple vulnerabilities in Cisco SD-WAN products that could allow an authenticated attacker to perform command injection attacks against an affected...

多款Cisco产品命令注入漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. A command injection vulnerability exists in the Cisco SD-WAN vMange software. The vulnerability stems from the program not properly validati...

Cisco SD-WAN vManage Software 安全漏洞

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An information disclosure vulnerability exists in the CLI of Cisco SD-WAN vManage versions prior to 19.2.3, which can be exploited by an attacker to read database files from the underlying...

Cisco SD-WAN vManage Software 路径遍历漏洞

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. A path traversal vulnerability exists in the Web management interface of Cisco SD-WAN vManage versions prior to 18.2.0. The vulnerability stems from insufficient authentication of HTTP...

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a attacker to perform a cross-site scripting attack.

The vulnerability in the vManage web interface of the Cisco SD-WAN programmatically defined network is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...

Cisco SD-WAN Software Elevation of Privilege Vulnerability

Cisco SD-WAN vManage is software from Cisco that provides software-defined networking capabilities. The software is a way to virtualize the network.Cisco SD-WAN vEdge is a router from Cisco. The device provides basic WAN, security and multi-cloud capabilities for Cisco SD-WAN solutions. An...

Cisco SD-WAN vManage Software XXE (cisco-sa-vmanx3-vrZbOqqD)

According to its self-reported version, Cisco SD-WAN vManage is affected by an XML external entity XXE vulnerability due to an incorrectly configured XML parser accepting XML external entities from an untrusted source. An authenticated, remote attacker can exploit this, via specially crafted XML...

Cisco SD-WAN vManage Software XSS (cisco-sa-vmanxss1-XhJCymBt)

According to its self-reported version, Cisco SD-WAN vManage is affected by a cross-site scripting XSS vulnerability in the web-based management interface due to not properly validating user-supplied input. An authenticated, remote attacker can exploit this, by convincing a user to click a...