CVE-2021-1468 Cisco SD-WAN vManage Software Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application. For...

CVE-2021-1468

Cisco SD-WAN vManage Software is affected by multiple vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code or access sensitive information, or allow an authenticated, local attacker to gain elevated privileges. The root cause is described across sources a...

Critical Flaws Hit Cisco SD-WAN vManage and HyperFlex Software

Networking equipment major Cisco has rolled out software updates to address multiple critical vulnerabilities impacting HyperFlex HX and SD-WAN vManage Software that could allow an attacker to perform command injection attacks, execute arbitrary code, and gain access to sensitive information. In ...

 Cisco Releases Security Updates for Multiple Products 

Cisco has released security updates to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. CISA...

Cisco SD-WAN vManage Denial of Service Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A denial of service vulnerability exists in the API of Cisco SD-WAN vManage, which stems from insufficient handling of API requests and can be exploited by an attacker to cau...

Cisco SD-WAN vManage elevation of privilege vulnerability (CNVD-2021-37686)

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. An elevation of privilege vulnerability exists in the web management interface of Cisco SD-WAN vManage, which stems from the software not performing authorization checks on...

PT-2021-13517 · Cisco · Cisco Sd-Wan Vedge

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vEdge Software affected versions not specified Description: Multiple vulnerabilities in the software could allow an attacker to execute arbitrary code as the root user or cause a denial of service DoS condition on an affected...

Cisco SD-WAN vManage Cluster Mode Unauthorized Service Access Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A cluster mode unauthorized service access vulnerability exists in Cisco SD-WAN vManage, which can be exploited by an attacker to bypass authorization checks and gain...

Cisco SD-WAN vManage Authorization Issues Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. An authorization issue vulnerability exists in the messaging service of Cisco SD-WAN vManage, which can be exploited by an attacker to invoke elevated privilege operations,...

Cisco SD-WAN vManage Cross-Site Scripting Vulnerability (CNVD-2021-37690)

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. A cross-site scripting vulnerability exists in the API of Cisco SD-WAN vManage versions prior to 20.5.1, which stems from the API failing to...

Cisco SD-WAN vEdge Buffer Overflow Vulnerability (CNVD-2021-37680)

Cisco SD-WAN vEdge is a router from Cisco. The device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions. A buffer overflow vulnerability exists in the forwarding error correction of the Cisco SD-WAN vEdge, which can be exploited by an attacker to cause the...

Cisco SD-WAN vManage Information Disclosure Vulnerability (CNVD-2021-37692)

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. An information disclosure vulnerability exists in the cluster management interface of Cisco SD-WAN vManage versions prior to 20.5.1. The...

Cisco SD-WAN vEdge Buffer Overflow Vulnerability

Cisco SD-WAN vEdge is a router from Cisco. The device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions. The Cisco SD-WAN vEdge has a buffer overflow vulnerability that can be exploited by an attacker to cause a buffer overflow by sending malicious traffic...

Cisco SD-WAN vManage Cluster Mode Unauthorized Access Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A cluster mode unauthorized access vulnerability exists in the web management interface of Cisco SD-WAN vManage, which stems from the software not performing authorization...

Cisco SD-WAN vEdge Buffer Overflow Vulnerability (CNVD-2021-37681)

Cisco SD-WAN vEdge is a router from Cisco. The device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions. A buffer overflow vulnerability exists in the packet mirroring feature of the Cisco SD-WAN vEdge, which can be exploited by an attacker to cause an affected...

Cisco SD-WAN vManage Access Control Error Vulnerability

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. An access control error vulnerability exists in Cisco SD-WAN vManage, which can be exploited by an unauthenticated, neighboring attacker to...

Cisco SD-WAN 缓冲区错误漏洞

Cisco SD-WAN vEdge is a router from Cisco. The device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions. A buffer overflow vulnerability exists in the packet mirroring feature of the Cisco SD-WAN vEdge, which can be exploited by an attacker to cause an affected...

Cisco SD-WAN vManage Authentication Bypass Vulnerability

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. An authentication bypass vulnerability exists in the Web Messaging Service interface of Cisco SD-WAN vManage, which can be exploited by an...

Cisco SD-WAN vManage Software Information Disclosure Vulnerability

A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. To be affected by this vulnerability, the vManage software must be in cluster mode. This vulnerability is due t...

Cisco SD-WAN Software Privilege Escalation Vulnerability

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with Administrator privileges on the underlying operating system. This vulnerability is due to insufficient input validation on certain CLI commands. An...