CVE-2017-3881

CVE-2017-3881 Ejecución remota de código en Cisco IOS Este repositorio contiene código de Prueba de Concepto para explotar la vulnerabilidad de ejecución remota de código divulgada por Cisco Systems el 17 de marzo de 2017 -...

CVE-2017-3881-Cisco

CVE-2017-3881 Cisco Catalyst RCE 概念验证 2017年4月10日 你的 Catalyst 交换机上还开着 telnet 吗？三思而后行，这里有一个针对 Catalyst 2960 交换机（运行最新建议固件）的远程代码执行概念验证漏洞利用。点击此处查看漏洞利用代码。接下来是对该漏洞利用开发过程的详细描述，该漏洞于2017年3月7日从 CIA 档案中泄露，并于2017年3月17日由 Cisco Systems 公开披露。撰写本文时尚无补丁可用。不过有一种补救措施——禁用 telnet 并改用 SSH。 Vault 7 CIA 泄露 一系列 CIA...

CVE-2026-20182

CVE-2026-20182 Cisco Catalyst SD-WAN 对等认证绕过 CVE-2026-20182 — Cisco Catalyst SD-WAN 对等认证绕过 针对 Cisco Catalyst SD-WAN 控制器/管理器对等认证绕过 CVE-2026-20182 的授权测试评估工具。 | ---|--- CVE| CVE-2026-20182 严重性| 严重 CVSS 10.0 CVSS 3.1| AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 产品| Cisco Catalyst SD-WAN 控制器 原 vSmart · Cisco...

CVE-2021-40113

CVE-2021-40113 Cisco Catalyst 无源光网络 PON 系列交换机光网络终端 ONT 的基于 Web 的管理界面中存在多个漏洞，可能允许未经身份验证的远程攻击者执行以下操作：如果 Telnet 协议已启用，则使用默认凭据登录；执行命令注入；修改配置。有关这些漏洞的更多信息，请参阅本公告的详细信息部分。 身份验证| 复杂度| 向量 ---|---|--- 无| 低| 网络 机密性| 完整性| 可用性 ---|---|--- 部分| 部分| 部分 CVSS 评分：7.5 参考...

CVE-2026-20127

🛡️ CVE-2026-20127 — Omisión de Autenticación en Cisco Catalyst SD-WAN 📌 Resumen CVE-2026-20127 es una vulnerabilidad crítica de omisión de autenticación que afecta a los componentes de Cisco Catalyst SD-WAN, incluidos los controladores y sistemas de gestión. Un atacante remoto no autenticado puede...

CVE-2026-20182

CVE-2026-20182 — Bypass de Autenticación en Cisco Catalyst SD-WAN Controller / Manager Un exploit de prueba de concepto para CVE-2026-20182 , un bypass de autenticación crítico CVSS 10.0 en el servicio vdaemon DTLS UDP/12346 en Cisco Catalyst SD-WAN Controller vSmart y Manager vManage. Divulgado:...

CVE-2026-20127_EXP

CVE-2026-20127EXP Exploit EXP para la vulnerabilidad de omisión de autenticación en Cisco Catalyst SD-WAN CVE-2026-20127 Uso básico python scan.py -f targets.txt Mostrar información detallada python scan.py -f targets.txt -v Ajustar el número de hilos y guardar resultados python scan.py -f...

CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit

CVE-2026-20245 - Cisco SD-WAN 权限提升利用工具 ⚠️ 警告 此代码仅用于教育目的和授权的安全测试。 📋 描述 CVE-2026-20245 是 Cisco Catalyst SD-WAN Controller vSmart、Cisco Catalyst SD-WAN Manager vManage 和 Cisco Catalyst SD-WAN Validator vBond CLI 中的一个权限提升 漏洞。拥有 netadmin 权限的认证攻击者可以通过上传特制文件以 root 身份执行任意命令。 技术细节 字段| 值 ---|--- CVE|...

CVE-2026-20131-POC

CVE-2026-20131---Cisco-SD-WAN-Preauth-RCE Zero-Day CVE-2026-20131 de Cisco SD-WAN explotado desde 2023 para acceso de administrador. Este repositorio contiene un exploit de prueba de concepto funcional para CVE-2026-20131, una vulnerabilidad crítica de pre-autenticación en Cisco Catalyst SD-WAN...

CVE-2026-20127

CVE-2026-20127 Resumen Un exploit para la vulnerabilidad de omisión de autenticación en Cisco Catalyst SD-WAN Controller, CVE-2026-20127. Este exploit ataca el manejador vbondprocchallengeackack. Envía un mensaje CHALLENGEACKACK falsificado msgtype=10 con un byte verifystatus=1 controlado por el...

CVE-2026-20127-Exploit-Extension

Resumen Ejecutivo El Defensor Complementario de CVE-2026-20127 es una extensión de navegador premium de nivel empresarial diseñada para inteligencia de amenazas proactiva y análisis defensivo. Esta herramienta encapsula investigación técnica autorizada sobre la vulnerabilidad de omisión de...

PoC-CVE-2017-3881

PoC-CVE-2017-3881 PoC de ejecución remota de código en Cisco Catalyst Este repositorio contiene el código de prueba de concepto para explotar la vulnerabilidad de ejecución remota de código divulgada por Cisco Systems el 17 de marzo de 2017 -...

Cisco Catalyst SD-WAN Software Security Hardening (cisco-sa-hardening-sdwan-faLcR3K)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by multiple vulnerabilities. - Multiple vulnerabilities in Cisco Catalyst SD-WAN Software could allow an authenticated, remote attacker to conduct path traversal attacks, gain unauthorized access, or cause a denial ...

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN (formerly Cisco SD-WAN) lies in insufficient validation of input data, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN (formerly Cisco SD-WAN) lies in the improper definition of symbolic links before accessing a file. This allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to the improper definition of symbolic links before accessing the file. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN (formerly Cisco SD-WAN) relates to deficiencies in access control, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2026-20304

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that address multiple internally discovered vulnerabilities. The...

CVE-2026-20313

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

CVE-2026-20312

Technical details for CVE-2026-20312 are not publicly available in the provided documents. Please monitor for updates from Cisco security advisories and NVD for affected products, versions, and remediation steps.

EUVD-2026-53471

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...