PT-2020-1387

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution vManage software affected versions not specified Description The issue is related to insufficient input validation in the CLI of the Cisco SD-WAN Solution vManage software, allowing an authenticated, local attacker to...

PT-2020-1573

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution vManage affected versions not specified Description A vulnerability in the web interface could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The...

CVE-2019-16002: Cross-Site Request Forgery (CSRF)

A vulnerability in the vManage web-based UI web UI of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected instan...

PT-2019-4238

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution vManage affected versions not specified Description The issue is related to a cross-site request forgery CSRF attack in the vManage web-based UI of the Cisco SD-WAN Solution. This attack could allow an unauthenticated,...

CVE-2019-1951

A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by...

CVE-2019-1951: Improper Input Validation

A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by...

PT-2019-3171

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution affected versions not specified Description The issue is related to insufficient input validation in the traffic filtering component of Cisco SD-WAN Solution. This could allow a remote attacker to bypass L2 and L4 traffic...

CVE-2019-1624 Cisco SD-WAN Solution Command Injection Vulnerability

A vulnerability in the vManage web-based UI Web UI in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerabilit...

CVE-2019-1624 Cisco SD-WAN Solution Command Injection Vulnerability

A vulnerability in the vManage web-based UI Web UI in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerabilit...

CVE-2019-1625 Cisco SD-WAN Solution Privilege Escalation Vulnerability

A vulnerability in the CLI of Cisco SD-WAN Solution could allow an authenticated, local attacker to elevate lower-level privileges to the root user on an affected device. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by...

CVE-2019-1624: Improper Neutralization of Special Elements used in a Command

A vulnerability in the vManage web-based UI Web UI in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerabilit...

CVE-2019-1625: Undefined Security Weakness

A vulnerability in the CLI of Cisco SD-WAN Solution could allow an authenticated, local attacker to elevate lower-level privileges to the root user on an affected device. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by...

CVE-2019-1626: Incorrect Authorization

A vulnerability in the vManage web-based UI Web UI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected vManage device. The vulnerability is due to a failure to properly authorize certain user actions in the device configuration. An...

PT-2019-2436

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution affected versions not specified Description The issue is related to insufficient authorization enforcement in the command-line interface of the Cisco SD-WAN Solution, allowing an authenticated, local attacker to elevate...

PT-2019-2441

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution affected versions not specified Description The issue is related to insufficient input validation in the vManage web-based UI, allowing an authenticated, remote attacker to inject arbitrary commands that are executed with...

PT-2019-2440

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution vManage affected versions not specified Description A vulnerability in the vManage web-based UI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected vManage...

CVE-2019-1651 Cisco SD-WAN Solution Buffer Overflow Vulnerability

A vulnerability in the vContainer of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to cause a denial of service DoS condition and execute arbitrary code as the root user. The vulnerability is due to improper bounds checking by the vContainer. An attacker could exploit th...

CVE-2019-1648

CVE-2019-1648 affects Cisco SD-WAN Solution. A vulnerability in the user group configuration allows an authenticated, local attacker to write a crafted file to the directory containing the group config, bypassing validation and gaining root-level privileges. Impact is full device takeover. Sympto...

CVE-2019-1646: Improper Neutralization of Special Elements used in a Command

A vulnerability in the local CLI of the Cisco SD-WAN Solution could allow an authenticated, local attacker to escalate privileges and modify device configuration files. The vulnerability exists because user input is not properly sanitized for certain commands at the CLI. An attacker could exploit...

CVE-2019-1650: Improper Input Validation

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the save command in the CLI of the affected software. An...