Lucene search
K

38 matches found

Cvelist
Cvelist
added 2024/09/25 4:20 p.m.12 views

CVE-2024-20496 Cisco SD-WAN vEdge Routers Denial of Service Vulnerability

A vulnerability in the UDP packet validation code of Cisco SD-WAN vEdge Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. This vulnerability is due to incorrect handling of a specific type of malformed UDP packet. An...

6.1CVSS0.00056EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:0 a.m.2 views

The vulnerability of the command-line interface of microprogramming software for Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage arises from incorrect path name restrictions related to restricted access directories. This vulnerability allows attackers to create or re-record critical files.

The vulnerability of the command-line interface of microprogramming software for Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage is related to an...

7.8CVSS7.2AI score0.00517EPSS
Exploits1References3Affected Software4
Positive Technologies
Positive Technologies
added 2022/09/29 12:0 a.m.3 views

PT-2022-6016 · Cisco · Cisco Sd-Wan Vsmart Controller +5

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN Software versions affected versions not specified Cisco SD-WAN vBond Orchestrator versions affected versions not specified Cisco SD-WAN vEdge Cloud Routers versions affected versions not specified Cisco SD-WAN vEdge Routers...

7.8CVSS7.8AI score0.00517EPSS
Exploits1References7
OSV
OSV
added 2022/04/15 3:15 p.m.2 views

CVE-2022-20717

A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cause an affected device to run out of memory, resulting in a denial of service DoS condition. This vulnerability is due to insufficient memory management when an affected device...

5.5CVSS6.1AI score0.00058EPSS
Exploits0References1
NVD
NVD
added 2022/04/15 3:15 p.m.10 views

CVE-2022-20717

A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cause an affected device to run out of memory, resulting in a denial of service DoS condition. This vulnerability is due to insufficient memory management when an affected device...

5.5CVSS0.00058EPSS
Exploits0References1
Prion
Prion
added 2022/04/15 3:15 p.m.14 views

Race condition

A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cause an affected device to run out of memory, resulting in a denial of service DoS condition. This vulnerability is due to insufficient memory management when an affected device...

4.9CVSS5.3AI score0.00058EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/04/15 2:15 p.m.8 views

CVE-2022-20717 Cisco SD-WAN vEdge Routers Denial of Service Vulnerability

A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cause an affected device to run out of memory, resulting in a denial of service DoS condition. This vulnerability is due to insufficient memory management when an affected device...

5.5CVSS6.6AI score0.00058EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/04/15 2:15 p.m.17 views

CVE-2022-20717 Cisco SD-WAN vEdge Routers Denial of Service Vulnerability

A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cause an affected device to run out of memory, resulting in a denial of service DoS condition. This vulnerability is due to insufficient memory management when an affected device...

5.5CVSS5.6AI score0.00058EPSS
Exploits0References1
CVE
CVE
added 2022/04/15 2:15 p.m.82 views

CVE-2022-20717

Cisco SD-WAN vEdge Routers are affected by CVE-2022-20717 due to a NETCONF handling memory-management flaw that can allow an authenticated, local attacker to trigger memory exhaustion and cause a DoS by sending large volumes of traffic. The impact is device crash/DoS as described in multiple sour...

5.5CVSS5.3AI score0.00058EPSS
Exploits0References1Affected Software1
Cisco
Cisco
added 2022/04/13 4:0 p.m.20 views

Cisco SD-WAN vEdge Routers Denial of Service Vulnerability

A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cause an affected device to run out of memory, resulting in a denial of service DoS condition. This vulnerability is due to insufficient memory management when an affected device...

5.5CVSS5.3AI score0.00058EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2022/04/13 12:0 a.m.17 views

Cisco SD-WAN vEdge Routers DoS (cisco-sa-sdwan-vedge-dos-jerVm4bB)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cause an affected device to run out of memory, resulting in a denial of...

5.5CVSS5.7AI score0.00058EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/04/13 12:0 a.m.4 views

PT-2022-2303 · Cisco · Cisco Sd-Wan Vedge Routers

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vEdge Routers affected versions not specified Description: The issue is related to insufficient memory management in the NETCONF process of Cisco SD-WAN vEdge Routers, which can lead to an uncontrolled memory consumption. An...

5.5CVSS5.3AI score0.00058EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/01/19 12:0 a.m.5 views

Cisco 多款产品操作系统命令注入漏洞

Cisco SD-WAN vManage Software and others are products of Cisco. cisco SD-WAN vManage Software is a management software for SD-WAN software-defined wide-area network solutions. cisco SD-WAN vEdge Routers is a software for authentication between Cisco vSmart Controllers and vEdge routers...

8.8CVSS5.8AI score0.004EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2021/03/15 12:0 a.m.32 views

Cisco SD-WAN vEdge Routers DoS (cisco-sa-vedgfpdos-PkqQrnwV)

According to its self-reported version, Cisco SD-WAN vEdge routers are affected by a denial of service DoS vulnerability in the deep packet inspection DPI engine due to insufficient handling of malformed packets. An unauthenticated, adjacent attacker can exploit this to cause a DoS condition...

7.4CVSS6.8AI score0.00052EPSS
Exploits0References3
ThreatPost
ThreatPost
added 2021/01/20 9:47 p.m.64 views

Critical Cisco SD-WAN Bugs Allow RCE Attacks

Cisco is warning of multiple, critical vulnerabilities in its software-defined networking for wide-area networks SD-WAN solutions for business users. Cisco issued patches addressing eight buffer-overflow and command-injection SD-WAN vulnerabilities. The most serious of these flaws could be...

2.2AI score0.11689EPSS
Exploits0References9
NVD
NVD
added 2020/07/16 6:15 p.m.11 views

CVE-2020-3385

A vulnerability in the deep packet inspection DPI engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to insufficient handling of malformed packets. An attacker could...

7.4CVSS0.00052EPSS
Exploits0References1
NVD
NVD
added 2020/07/16 6:15 p.m.13 views

CVE-2020-3369

A vulnerability in the deep packet inspection DPI engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper processing of FTP traffic. An attacker could exploit this...

8.6CVSS0.01156EPSS
Exploits0References1
Prion
Prion
added 2020/07/16 6:15 p.m.12 views

Design/Logic Flaw

A vulnerability in the deep packet inspection DPI engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper processing of FTP traffic. An attacker could exploit this...

7.8CVSS7.4AI score0.01156EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2020/07/16 6:15 p.m.14 views

Design/Logic Flaw

A vulnerability in the deep packet inspection DPI engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to insufficient handling of malformed packets. An attacker could...

6.1CVSS6.3AI score0.00052EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/07/16 5:22 p.m.19 views

CVE-2020-3385 Cisco SD-WAN vEdge Routers Denial of Service Vulnerability

A vulnerability in the deep packet inspection DPI engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to insufficient handling of malformed packets. An attacker could...

7.4CVSS6.4AI score0.00052EPSS
Exploits0References1
Rows per page
Query Builder