PT-2021-1857 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue concerns multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software. An authenticated, remote attacker could bypass...

PT-2021-1801 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN affected versions not specified Description: The issue is related to insufficient input validation in the command-line interface CLI of Cisco SD-WAN, which could allow an attacker to impact the confidentiality and integrity of...

PT-2021-1867 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN products affected versions not specified Description: The issue is related to multiple vulnerabilities in Cisco SD-WAN products that could allow an authenticated attacker to perform command injection attacks against an affected...

PT-2021-1860 · Cisco · Cisco Sd-Wan Vsmart Controller +5

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vBond Orchestrator versions affected versions not specified Cisco SD-WAN vEdge Cloud Routers versions affected versions not specified Cisco SD-WAN vEdge Routers versions affected versions not specified Cisco SD-WAN vSmart...

PT-2021-1866 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN products affected versions not specified Description: The issue concerns multiple vulnerabilities in Cisco SD-WAN products that could allow an authenticated attacker to perform command injection attacks against an affected device...

PT-2021-1841 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN Software affected versions not specified Description: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information on an affected device. The vulnerability is du...

多款Cisco产品命令注入漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. A command injection vulnerability exists in the CLI of Cisco SD-WAN Software. The vulnerability stems from the program not properly validati...

Cisco SD-WAN vManage Software 路径遍历漏洞

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. A path traversal vulnerability exists in the Web management interface of Cisco SD-WAN vManage versions prior to 18.2.0. The vulnerability stems from insufficient authentication of HTTP...

多款 Cisco SD-WAN 产品输入验证错误漏洞

The Cisco SD-WAN vEdge is a router from Cisco, Inc. that provides basic WAN and security and multi-cloud capabilities for Cisco SD-WAN solutions. This device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions.Cisco SD-WAN vManage is software from Cisco that...

PT-2021-1863 · Cisco · Cisco Sd-Wan Vedge +1

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vEdge versions affected versions not specified Description: The issue is related to a buffer overflow in the memory of Cisco SD-WAN vEdge router microcode, which could allow a remote attacker to cause a denial of service DoS. An...

多款Cisco产品命令注入漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. A command injection vulnerability exists in the CLI of Cisco SD-WAN Software that stems from the program not properly validating user input ...

PT-2021-1810 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN affected versions not specified Description: The issue is related to insufficient input validation in the tcpdump utility for Cisco SD-WAN, which could allow an attacker to elevate their privileges to the root level. An...

PT-2021-1861 · Cisco · Cisco Sd-Wan Vsmart Controller +7

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN products affected versions not specified Cisco IOS XE SD-WAN affected versions not specified Cisco SD-WAN vBond Orchestrator affected versions not specified Cisco SD-WAN vEdge Cloud Routers affected versions not specified Cisco...

PT-2021-1865 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN products affected versions not specified Description: The issue is related to multiple vulnerabilities in Cisco SD-WAN products that could allow an authenticated attacker to perform command injection attacks against an affected...

PT-2021-1834 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to insufficient input validation by the web-based management interface, allowing an authenticated, remote attacker to conduct Cypher query languag...

Cisco SD-WAN 代码问题漏洞

The Cisco SD-WAN vEdge is a router from Cisco, Inc. that provides basic WAN and security and multi-cloud capabilities for Cisco SD-WAN solutions. This device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions.Cisco SD-WAN vManage is software from Cisco that...

PT-2021-1858 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue exists due to insufficient input validation in the web-based management interface of Cisco SD-WAN vManage Software. This could allow a remote attacker to...

Unbreakable Enterprise kernel security update

5.4.17-2036.102.0.2uek - xen-blkback: set ring-xenblkd to NULL after kthreadstop Pawel Wieczorkiewicz Orabug: 32260252 CVE-2020-29569 - xenbus/xenbusbackend: Disallow pending watch messages SeongJae Park Orabug: 32253409 CVE-2020-29568 - xen/xenbus: Count pending messages for each watch SeongJae...

Zyxel SD-OS chg_exp_pwd Input Validation Vulnerability

Zyxel SD-OS is an operating system for network configuration applications. Zyxel SD-OS chgexppwd suffers from an input validation vulnerability that can be exploited by a remote attacker to submit a special request that can be injected with arbitrary commands and executed...

Zyxel ZLD和Zyxel SD-OS 命令注入漏洞

Zyxel SD-OS is an operating system for network configuration applications. Zyxel SD-OS chgexppwd suffers from an input validation vulnerability that can be exploited by a remote attacker to submit a special request that can be injected with arbitrary commands and executed...