CVE-2021-1433 Cisco IOS XE SD-WAN Software vDaemon Buffer Overflow Vulnerability

A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to insufficient bounds checking when the device processes traffic. An attacker could exploit this...

Cisco SD-WAN vManage Software Information Disclosure (cisco-sa-vmanwebid-5QWMcCvt)

The version of Cisco SD-WAN vManage software installed on the remote host is affected by an information disclosure vulnerability as referenced in the cisco-sa-vmanwebid-5QWMcCvt advisory. - A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an...

The vulnerability of the command-line interface (CLI) of the vManage web interface for programmatically defined Cisco SD-WAN networks allows a attacker to compromise the integrity of protected information.

The vulnerability of the command-line interface CLI of the vManage web interface for the Cisco SD-WAN network is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Cisco SD-WAN vManage XSS (cisco-sa-vmanxss-z7bhvHpy)

The version of Cisco SD-WAN vManage installed on the remote host is prior affected by a vulnerability as referenced in the cisco-sa-vmanxss-z7bhvHpy advisory. - A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker...

Cisco SD-WAN vManage Software Command Injection (cisco-sa-clibypvman-sKcLf2L)

The version of Cisco SD-WAN vManage Software installed on the remote host is affected by a vulnerability as referenced in the cisco-sa-clibypvman-sKcLf2L advisory. - A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary comman...

Cisco SD-WAN vManage Software Path Traversal (cisco-sa-vmandowndir-CVGvdKM3)

The version of Cisco SD-WAN vManage Software installed on the remote host is affected by a vulnerability as referenced in the cisco-sa-vmandowndir-CVGvdKM3 advisory. - A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote...

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a attacker to execute arbitrary SQL queries.

The vulnerability in the vManage web interface of the Cisco SD-WAN program-defined network is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the vManage web interface of the Cisco SD-WAN software-defined network is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the vManage web interface of the Cisco SD-WAN software-defined network is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the vManage web interface of the Cisco SD-WAN software-defined network is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the vDaemon service in the Cisco SD-WAN vManage centralized system allows a attacker to trigger a service failure.

The vulnerability of the vDaemon service in the Cisco SD-WAN vManage centralized network management system is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Cisco SD-WAN Solution vManage SQLi (cisco-sa-20200318-vmanage-cypher-inject)

The version of Cisco SD-WAN Solution vManage installed on the remote host is affected by a vulnerability as referenced in the cisco-sa-20200318-vmanage-cypher-inject advisory. - A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker t...

Cisco SD-WAN Solution Privilege Escalation (cisco-sa-20190619-sdwan-privilescal)

According to its self-reported version, Cisco SD-WAN Solution vManage software is affected by a privilege escalation vulnerability in the web-based UI due to a failure to properly authorize certain user actions in the device configuration. An authenticated, remote attacker can exploit this to gai...

Cisco SD-WAN vManage Software DoS (cisco-sa-emvman-3y6LuTcZ)

According to its self-reported version, Cisco SD-WAN vManage is affected by a denial of service vulnerability in the web-based management interface due to inefficient memory management. An authenticated, remote attacker can exploit this, by sending a large number of crafted HTTP requests to the...

Cisco SD-WAN vManage Software SQL Injection Vulnerability (cisco-sa-vmanage-v78FubGV)

The version of Cisco SD-WAN vManage Software installed on the remote host is affected by a vulnerability as referenced in the cisco-sa-vmanage-v78FubGV advisory. - A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker ...

Cisco SD-WAN vManage Software SQLi (cisco-sa-sivm-M8wugR9O)

According to its self-reported version, Cisco SD-WAN vManage is affected by an SQL injection SQLi vulnerability in the web-based management interface due to not properly validating user-supplied input. An authenticated, remote attacker can exploit this, by sending crafted input that includes SQL...

Cisco SD-WAN Solution Local Privilege Escalation (cisco-sa-20200122-sdwan-priv-esc)

According to its self-reported version, Cisco SD-WAN vManage is affected by a vulnerability due to insufficient input validation. An authenticated, local attacker can exploit this, by sending a crafted file, in order to elevate privileges to root on the underlying operating system. Please see the...

Cisco SD-WAN vManage Command Injection (cisco-sa-20200122-sdwan-cmd-inject)

The version of Cisco SD-WAN vManage installed on the remote host is prior to 18.3.0. It is, therefore, affected by a vulnerability as referenced in the cisco-sa-20200122-sdwan-cmd-inject advisory. - A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote...

Cisco SD-WAN Solution vManage Cross-Site Request Forgery (cisco-sa-20191120-vman-csrf)

The version of Cisco SD-WAN Solution vManage installed on the remote host is affected by a vulnerability as referenced in the cisco-sa-20191120-vman-csrf advisory, as follows: - A vulnerability in the vManage web-based UI web UI of the Cisco SD-WAN Solution could allow an unauthenticated, remote...

Cisco SD-WAN vManage Software XXE (cisco-sa-vmanxml-Aj4GFEKd)

The version of Cisco SD-WAN vManage Software installed on the remote host is 19.2.2 or earlier. It is, therefore, affected by a vulnerability as referenced in the cisco-sa-vmanxml-Aj4GFEKd advisory. - A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated,...