CVE-2021-1510

CVE-2021-1510 corresponds to Cisco SD-WAN vEdge Software vulnerabilities, collectively described as buffer overflow issues in the vEdge component with potential to execute arbitrary code as root or cause DoS. Connected sources specify a buffer overflow vulnerability (e.g., in packet mirroring) th...

CVE-2021-1509 Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service DoS condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1509 Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service DoS condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1509

CVE-2021-1509 concerns Cisco SD-WAN vEdge Software buffer overflow vulnerabilities. Attackers could execute arbitrary code as root or cause DoS by sending crafted traffic. Cisco advisory states multiple vulnerabilities and that software updates address these issues; no workaround is indicated her...

CVE-2021-1508 Cisco SD-WAN vManage Software Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application. For...

CVE-2021-1508 Cisco SD-WAN vManage Software Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application. For...

CVE-2021-1508

Cisco SD-WAN vManage Software is affected by multiple CVEs (CVE-2021-1508 among them) that could allow an unauthenticated, remote attacker to execute arbitrary code or access sensitive information, or a authenticated, local attacker to gain elevated privileges. The issue affects the vManage web i...

CVE-2021-1507 Cisco SD-WAN vManage API Stored Cross-Site Scripting Vulnerability

A vulnerability in an API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against users of the application web-based interface. This vulnerability exists because the API does not properly validate user-supplied...

CVE-2021-1507 Cisco SD-WAN vManage API Stored Cross-Site Scripting Vulnerability

A vulnerability in an API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against users of the application web-based interface. This vulnerability exists because the API does not properly validate user-supplied...

CVE-2021-1507

Cisco SD-WAN vManage API stores inputs XSS vulnerability affecting authenticated remote users. The issue arises because the API does not properly validate input, enabling execution of arbitrary script code in the web UI context or access to browser-based information. Affected product: Cisco SD-WA...

CVE-2021-1506 Cisco SD-WAN vManage Software Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application. For...

CVE-2021-1506

Cisco SD-WAN vManage Software contains multiple vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code or access sensitive information, or allow an authenticated, local attacker to gain elevated privileges. Affected component: Cisco SD-WAN vManage Software;...

CVE-2021-1506 Cisco SD-WAN vManage Software Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application. For...

CVE-2021-1505 Cisco SD-WAN vManage Software Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application. For...

CVE-2021-1505

Cisco SD-WAN vManage Software is affected by multiple vulnerabilities (CVE-2021-1505 among others) in its web management interface allowing unauthenticated remote code execution or information disclosure, and, for authenticated local attackers, privilege escalation. Root causes relate to insuffic...

CVE-2021-1505 Cisco SD-WAN vManage Software Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application. For...

CVE-2021-1486 Cisco SD-WAN vManage HTTP Authentication User Enumeration Vulnerability

A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts. This vulnerability is due to the improper handling of HTTP headers. An attacker could exploit this vulnerability by sending authenticated requests to an affected system. A...

CVE-2021-1486

CVE-2021-1486 describes an information‑disclosure vulnerability in Cisco SD-WAN vManage Software. An unauthenticated, remote attacker can enumerate valid user accounts by exploiting improper handling of HTTP headers, by sending requests to the affected system and comparing HTTP responses. Connect...

CVE-2021-1486 Cisco SD-WAN vManage HTTP Authentication User Enumeration Vulnerability

A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts. This vulnerability is due to the improper handling of HTTP headers. An attacker could exploit this vulnerability by sending authenticated requests to an affected system. A...

CVE-2021-1468 Cisco SD-WAN vManage Software Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application. For...