Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP Edition appliance Security Update

Multiple vulnerabilities have been discovered in Citrix ADCformerlyknown asNetScaler ADCandCitrix Gateway formerlyknown asNetScaler Gateway,and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO.These vulnerabilities,if exploited,could result in the following security issue...

Cisco IOS XE Software SD WAN Console Privilege Escalation (cisco-sa-sdwan-esc-rSNVvTf9)

A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker with read-only privileges to obtain administrative privileges by using the console port when the device is in the default SD-WAN configuration. This vulnerability occurs...

Cisco IOS XE Software SD WAN Arbitrary Command Execution (cisco-sa-iosxe-sdwarbcmdexec-sspOMUr3)

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the root user. The attacker must be authenticated on the affected device as a low-privileged user to exploit this...

Cisco SD-WAN vManage Software Path Traversal (cisco-sa-vman-pathtrav-Z5mCVsjf)

According to its self-reported version, Cisco SD-WAN vManage Software is affected by a vulnerability in the web-based management interface due to insufficient validation of HTTP requests. An authenticated, remote attacker can exploit this, by sending crafted HTTP requests, in order to conduct pat...

Cisco SD-WAN Software Privilege Escalation (cisco-sa-vepegr-4xynYLUj)

According to its self-reported version, Cisco SD-WAN Software is affected by a privilege escalation vulnerability due to incorrect permissions being set when the affected command is executed. An authenticated, local attacker can exploit this in order to gain root privileges. Note that Nessus has...

Cisco SD-WAN vManage Software Privilege Escalation (cisco-sa-sdwan-privesc-vman-kth3c82B)

According to its self-reported version, Cisco SD-WAN vManage Software is affected by a vulnerability due to incorrect privilege assignment. An authenticated, local attacker can exploit this to elevate their privileges from Administrator to root by creating a malicious file. Note that Nessus has n...

Cisco SD-WAN Command Injection Vulnerabilities (cisco-sa-sdwan-cmdinjm-9QMSmgcn)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by multiple vulnerabilities that allow an authenticated attacker to inject commands and take actions with root privileges. Note that Nessus has not tested for this issue but has instead relied only on the...

Command Execution Vulnerability in SD-WAN of Beijing Tianchi Network Co.

Skychase Networks is a value-added telecom service provider in China. A command execution vulnerability exists in the SD-WAN of Beijing Tianchi Network Co. Ltd. that can be exploited by an attacker to gain control of a server...

Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities (cisco-sa-sdwan-buffover-MWGucjtO)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by multiple vulnerabilities. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Cisco SD-WAN Software vDaemon DOS (cisco-sa-sdwan-dos-Ckn5cVqW)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Weak Password Vulnerability in DH-SD-6A9226F-HNI of Zhejiang Dahua Stock Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a leading supplier and solution provider of surveillance products. Zhejiang Dahua Technology Co., Ltd DH-SD-6A9226F-HNI has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Citrix SD-WAN Center Test Build Network DoS (CTX297155)

The remote Citrix SD-WAN Center is version 10.2.x prior to 10.2.9a, 11.1.x prior to 11.1.2c, 11.2.x prior to 11.2.3a, or 11.2.x prior to 11.3.1a. It is, therefore, vulnerable to a Network-based denial-of-service from an attacker within the same Layer 2 network segment. Note that Nessus has not...

CVE-2020-8299

Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a suffers from uncontrolled resource consumption by way of a network-based...

Code injection

Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a suffers from uncontrolled resource consumption by way of a network-based...

CVE-2020-8299

CVE-2020-8299 affects Citrix ADC, Citrix Gateway, and Citrix SD-WAN WANOP Edition with a network-based DoS caused by uncontrolled resource consumption within the same Layer 2 segment. Affected versions listed in public disclosures include Citrix ADC/Gateway 13.0 before 13.0-76.29, 12.1 before 12....

SD-WAN Diagnostics Tool traffic (ping, traceroute and iperf) is being dropped by firewall policy

SD-WAN Diagnostics Tool traffic ping, traceroute and iperf is being dropped by a firewall policy manually configured to drop traffic that has not been explicitly allowed...

SUSE: Security Advisory (SUSE-SU-2019:1364-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco SD-WAN vManage Information Disclosure (cisco-sa-sdwan-vmanageinfdis-LKrFpbv)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by an information disclosure vulnerability due to absence of authentication to view sensitive information. An unauthenticated, remote attacker can exploit this, by sending a crafted request to the cluster management...

CVE-2021-1528

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected system. This vulnerability exists because the affected software does not properly restrict access to privileged processes. An attacker could exploit this...

CVE-2021-1528

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected system. This vulnerability exists because the affected software does not properly restrict access to privileged processes. An attacker could exploit this...