CVE-2021-1454: Improper Input Validation

Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges. These vulnerabilities are due to insufficient input validation of certain CLI commands. An attacker could exploit these...

PT-2021-2494

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE SD-WAN Software affected versions not specified Description: The issue is related to insufficient validation of user-supplied input in the command-line interface of the software, allowing an authenticated, local attacker to condu...

PT-2021-2577

Name of the Vulnerable Software and Affected Versions Cisco IOS XE SD-WAN Software affected versions not specified Description A vulnerability in the vDaemon process could allow an unauthenticated, remote attacker to cause a device to reload, resulting in a denial of service DoS condition. This...

PT-2021-2493

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE SD-WAN Software affected versions not specified Description: A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system. This...

PT-2021-2478

Name of the Vulnerable Software and Affected Versions Cisco IOS XE SD-WAN Software affected versions not specified Description A vulnerability in the vDaemon process could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This issue is due to insufficient...

PT-2021-2578

Name of the Vulnerable Software and Affected Versions Cisco IOS XE SD-WAN Software affected versions not specified Description A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system a...

CVE-2021-1433: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to insufficient bounds checking when the device processes traffic. An attacker could exploit this...

CVE-2021-1432: Improper Input Validation

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the root user. The attacker must be authenticated on the affected device as a low-privileged user to exploit this...

CVE-2021-1434: Files or Directories Accessible to External Parties

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system. This vulnerability is due to insufficient validation of the parameters of a specific CLI command. An attacker could exploit this...

CVE-2021-1371: Improper Privilege Management

A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker with read-only privileges to obtain administrative privileges by using the console port when the device is in the default SD-WAN configuration. This vulnerability occurs...

CVE-2021-1431: Improper Input Validation

A vulnerability in the vDaemon process of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting a denial of service DoS condition. This vulnerability is due to insufficient handling of malformed packets. An attacker could exploit this...

CVE-2021-1383: Improper Input Validation

Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges. These vulnerabilities are due to insufficient input validation of certain CLI commands. An attacker could exploit these...

CVE-2021-1382: Improper Neutralization of Special Elements used in a Command

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root privileges on the underlying operating system. This vulnerability is due to insufficient input validation on certain CLI commands. An...

CVE-2021-1436: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to conduct path traversal attacks and obtain read access to sensitive files on an affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

CVE-2021-1233

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information on an affected device. The vulnerability is due to insufficient input validation of requests that are sent to the iperf tool. An attacker could exploit this vulnerabili...

CVE-2021-1233: Improper Input Validation

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information on an affected device. The vulnerability is due to insufficient input validation of requests that are sent to the iperf tool. An attacker could exploit this vulnerabili...

Design/Logic Flaw

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root group on the underlying operating system. The vulnerability is due to incorrect permissions being set when the affected command is executed. An attacker could exploit this...

CVE-2020-3444

Cisco SD-WAN Software contains a vulnerability in packet filtering where improper traffic filtering conditions could allow an unauthenticated, remote attacker to bypass L3/L4 filters by sending crafted TCP packets to a targeted device, potentially injecting arbitrary packets into the network. Aff...

CVE-2020-3595: Improper Privilege Management

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root group on the underlying operating system. The vulnerability is due to incorrect permissions being set when the affected command is executed. An attacker could exploit this...

CVE-2020-3594: Improper Privilege Management

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by providing crafted options to a specifi...