PT-2021-2262 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: A vulnerability exists in the vDaemon service of Cisco SD-WAN vManage Software. This issue could allow an authenticated, local attacker to cause a buffer overflow on a...

PT-2021-2261 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of an affected...

PT-2021-2263 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks o...

Informational: Impact of Sudo Vulnerability CVE-2021-3156

Palo Alto Networks Product Security Assurance team has evaluated the Sudo software vulnerability CVE-2021-3156. PAN-OS software, Prisma Cloud compute, and Prisma SD-WAN CloudGenix devices do not include the Sudo program and, therefore, no scenarios required for successful exploitation exist in...

The vulnerability of the NETCONF protocol implementation in Cisco SD-WAN software allows a attacker to cause service failure.

The vulnerability of the NETCONF protocol implementation in Cisco SD-WAN networks is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the IPSec tunnel of Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage allows a attacker to cause service interruptions.

The vulnerability of the IPSec tunnel of Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage is related to errors in processing IP packets passing through...

The vulnerability of the programmatically defined Cisco SD-WAN, related to errors in processing IP traffic, allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the programmatically defined Cisco SD-WAN network is related to errors in processing IP traffic. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with root privileges...

Cisco SD-WAN Information Disclosure (cisco-sa-sdwan-infodis-2-UPO232DG)

According to its self-reported version, an information disclosure vulnerability exists in the CLI of Cisco SD-WAN Software due to insufficient input validation of requests that are sent to the iperf tool. An unauthenticated, local attacker can exploit this, by sending a crafted request to the ipe...

The vulnerability of the tcpdump tool for capturing and analyzing network traffic in a software-defined Cisco SD-WAN network allows a hacker to elevate their privileges to the root level.

The vulnerability of the tcpdump tool for capturing and analyzing network traffic in a software-defined Cisco SD-WAN network is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

The vulnerability of the command-line interface (CLI) of the programmatically defined Cisco SD-WAN network allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the command-line interface CLI of Cisco SD-WAN software-defined networks is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

The vulnerability of the command-line interface of the programmatically defined Cisco SD-WAN network allows a intruder to gain unauthorized access to protected information.

The vulnerability of the command-line interface of Cisco SD-WAN programs exists due to insufficient validation of input data in iperf. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() routine in hw/sd/sdhci.c. A guest user or process could use this flaw to crash the QEMU process on the host resulting in a denial of service condition or potentially execute arbitrary code with privileges of the QEMU process on the host.

...

Cisco SD-WAN vManage Cypher Query Language Injection (cisco-sa-vmanage-cql-inject-72EhnUc)

According to its self-reported version, Cisco SD-WAN vManage is affected by a information disclosure vulnerability due to insufficient input validation by the web-based management interface. An authenticated, remote attacker can exploit this, via crafted HTTP requests, to obtain sensitive...

USN-4467-2 qemu vulnerabilities

USN-4467-1 fixed several vulnerabilities in QEMU. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that the QEMU SD memory card implementation incorrectly handled certain memory operations. An attacker inside a guest could possibly u...

Cisco SD-WAN DoS (cisco-sa-sdwan-dosmulti-48jJuEUP)

According to its self-reported version, Cisco SD-WAN is affected by multiple vulnerabilities, including the following: - A denial of service DoS vulnerability exists in the VPN tunneling features of Cisco SD-WAN Software due to insufficient handling of malformed packets. An unauthenticated, remot...

Cisco IOS XE SD-WAN DoS (cisco-sa-sdwan-dosmulti-48jJuEUP)

According to its self-reported version, Cisco IOS XE SD-WAN Software is affected by a denial of service DoS vulnerability in the UDP connection response due the presence of a null dereference in vDaemon. An unauthenticated, remote attacker can exploit this, by sending crafted traffic to an affect...

Cisco SD-WAN vManage Authorization Bypass (cisco-sa-sdwan-abyp-TnGFHrS)

According to its self-reported version, Cisco SD-WAN vManage is affected by multiple authorization bypass vulnerabilities: - An authorization bypass vulnerability exists in the web-based management interface due to insufficient authorization checks. An authenticated, remote attacker can exploit...

Cisco SD-WAN vManage Software XXE (cisco-sa-vmanx2-KpFVSUc)

According to its self-reported version, Cisco SD-WAN vManage is affected by an XML external entity XXE vulnerability due to an issue parsing certain XML files. An authenticated, remote attacker can exploit this, by persuading a user to import a crafted XML file with malicious entries, to gain rea...

Cisco SD-WAN vManage Software Path Traversal (cisco-sa-vmanpt2-FqLuefsS)

According to its self-reported version, Cisco SD-WAN vManage is affected by a path traversal vulnerability due to insufficient validation of HTTP requests. An authenticated, remote attacker can exploit this, by sending a crafted HTTP request that contains directory traversal character sequences, ...

Cisco SD-WAN vManage Software Arbitrary File Creation (cisco-sa-vmanage-file-Y2JSRNRb)

According to its self-reported version, Cisco SD-WAN vManage is affected by an arbitrary file creation vulnerability due to improper validation of requests to APIs. An authenticated, remote attacker can exploit this, by sending malicious requests to an API in the affected system, to conduct...