CVE-2019-1648: Improper Input Validation

A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the group configuration. An...

CVE-2019-1651: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the vContainer of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to cause a denial of service DoS condition and execute arbitrary code as the root user. The vulnerability is due to improper bounds checking by the vContainer. An attacker could exploit th...

CVE-2019-1647: Improper Access Control

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, adjacent attacker to bypass authentication and have direct unauthorized access to other vSmart containers. The vulnerability is due to an insecure default configuration of the affected system. An attacker could exploit thi...

Cisco SD-WAN Solution Privilege Escalation Vulnerability

A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the group configuration. An...

PT-2019-1298

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution affected versions not specified Description A vulnerability in the user group configuration could allow an authenticated, local attacker to gain elevated privileges on an affected device. The issue is due to a failure to...

PT-2019-1299

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution affected versions not specified Description A vulnerability in the local CLI of the Cisco SD-WAN Solution could allow an authenticated, local attacker to escalate privileges and modify device configuration files. The issu...

PT-2019-1226

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution affected versions not specified Description A vulnerability in the vContainer of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to cause a denial of service DoS condition and execute arbitrary cod...

PT-2019-1297

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution affected versions not specified Description The issue is related to inadequate access control in the Cisco SD-WAN Solution, which could allow an attacker to bypass authentication procedures and gain unauthorized access to...

PT-2019-1296

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution affected versions not specified Description The issue is due to improper input validation of the save command in the CLI of the affected software. An attacker could exploit this by modifying the save command in the CLI to...

CVE-2018-0434

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

CVE-2018-0432

A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the error reporting applicatio...

Design/Logic Flaw

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

CVE-2018-15387 Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a system image signed with a...

CVE-2018-0432

CVE-2018-0432 affects Cisco SD-WAN Solution. An authenticated, remote attacker could exploit the error reporting feature by crafting commands due to improper validation of error-reporting configuration parameters, potentially gaining root-level privileges and full control of the device. Public so...

CVE-2018-0433 Cisco SD-WAN Solution Command Injection Vulnerability

A vulnerability in the command-line interface CLI in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability ...

CVE-2018-0432: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the error reporting applicatio...

CVE-2018-0433: Improper Neutralization of Special Elements used in a Command

A vulnerability in the command-line interface CLI in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability ...

CVE-2018-0434: Improper Certificate Validation

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

PT-2018-8824

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution affected versions not specified Description A vulnerability in the command-line interface CLI could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The issue is...

CVE-2018-15387: Improper Input Validation

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a system image signed with a...