CVE-2021-1278

CVE-2021-1278 is part of Cisco SD‑WAN DoS vulnerabilities affecting multiple Cisco SD‑WAN products. The connected sources indicate an unauthenticated, remote attacker can cause denial of service on affected devices (e.g., reboot or DoS) via the vulnerability set described in Cisco advisory Cisco ...

CVE-2021-1279

CVE-2021-1279 describes DoS vulnerabilities in Cisco SD-WAN products where an unauthenticated, remote attacker can crash/restart affected devices. The root cause cited is insufficient input validation in the SNMPv3 protocol implementation. Covered products include Cisco SD‑WAN edge devices and re...

CVE-2021-1279 Cisco SD-WAN Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service DoS attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1279 Cisco SD-WAN Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service DoS attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1298 Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see...

CVE-2021-1298 Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see...

CVE-2021-1298

CVE-2021-1298 maps to multiple Cisco SD-WAN command injection vulnerabilities. The root cause is improper input validation in Cisco SD-WAN components allowing an authenticated attacker to execute commands with root privileges on affected devices. Affected products include Cisco SD-WAN solutions (...

CVE-2021-1299

CVE-2021-1299 refers to multiple command-injection flaws in Cisco SD-WAN product lines (notably SD-WAN vManage). The root cause is improper input validation in the device template configuration, allowing an authenticated attacker to inject commands and execute them with root privileges on the aff...

CVE-2021-1299 Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see...

CVE-2021-1299 Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see...

CVE-2021-1300 Cisco SD-WAN Buffer Overflow Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1300

CVE-2021-1300 corresponds to Cisco SD-WAN Buffer Overflow vulnerabilities. Connected sources indicate multiple buffer-overflow flaws in Cisco SD-WAN products that could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges by crafting IP traffic or abusing IP ha...

CVE-2021-1300 Cisco SD-WAN Buffer Overflow Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1301 Cisco SD-WAN Buffer Overflow Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1301 Cisco SD-WAN Buffer Overflow Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1301

Cisco SD-WAN Buffer Overflow Vulnerabilities (CVE-2021-1301) affect Cisco SD-WAN products. The issues allow an unauthenticated, remote attacker to execute attacks against an affected device due to multiple buffer overflow vulnerabilities. CVSSv3.1 score is 9.8 (CRITICAL) with NETWORK attack vecto...

CVE-2021-1302

Cisco SD-WAN vManage Security Advisory details a set of authorization bypass vulnerabilities in the web-based management interface. An authenticated remote attacker can bypass authorization to modify configurations and access sensitive information not authorized for their tenant. Affected product...

CVE-2021-1302 Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not...

CVE-2021-1302 Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not...

CVE-2021-1304

Cisco SD-WAN vManage web-based management interface contains authorization bypass vulnerabilities (CVE-2021-1304). An authenticated, remote attacker can bypass authorization to modify configurations and access sensitive information they are not authorized to view. Root cause cited in public advis...