Cisco IOS XE SD-WAN Software 输入验证错误漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in the vDaemon process for SD-WAN in Cisco IOS XE. The vulnerability stems from insufficient handling of malformed packets. An attacker...

Cisco IOS XE SD-WAN Software 安全漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An arbitrary file overwrite vulnerability exists in the CLI for SD-WAN for Cisco IOS XE. The vulnerability stems from insufficient validation of parameters for specific CLI...

Cisco IOS XE Software SD WAN Command Injection (cisco-sa-xesdwcinj-t68PPW7m)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Cisco IOS XE SD-WAN Buffer Overflow Vulnerabilities (cisco-sa-sdwan-bufovulns-B5NrSHbj)

According to its self-reported version, Cisco IOS XE SD-WAN Software is affected by multiple buffer overflow vulnerabilities that allow an unauthenticated, remote attacker to execute attacks against an affected device. Please see the included Cisco BIDs and Cisco Security Advisory for more...

Cisco SD-WAN Buffer Overflow Vulnerabilities (cisco-sa-sdwan-bufovulns-B5NrSHbj)

According to its self-reported version, Cisco SD-WAN products are affected by multiple buffer overflow vulnerabilities that allow an unauthenticated, remote attacker to execute attacks against an affected device. Please see the included Cisco BIDs and Cisco Security Advisory for more information...

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Weak Default WiFi Password Algorithm

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Weak Default WiFi Password Algorithm Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page: http://www.kzbtech.com | http://www.jatontec.com | https://www.neotel.mk http://www.jatontec.com/products/show.php?itemid=258...

NOTICE-OF-CHANGE ANNOUNCEMENT FOR CITRIX SD-WAN 5100 WANOP Edition and 4100 WANOP Edition

Citrix Systems, Inc. announces a Notice of Status Change for the Citrix SD-WAN formerly NetScaler 5100 WANOP and 4100 WANOP appliances. The tables below explain the Citrix SD-WAN life cycle management milestones as well as important information regarding dates and options during this period. The...

NOTICE-OF-CHANGE ANNOUNCEMENT FOR CITRIX SD-WAN Software 10.2.X Releases

Citrix Systems, Inc. announces a Notice of Status Change for the Citrix SD-WAN Software 10.2.X Releases. The tables below explain the Citrix SD-WAN Software life cycle management milestones as well as important information regarding dates and options during this period. The dates and milestones...

Cisco SD-WAN Solution Privilege Escalation (cisco-sa-20190619-sdwan-privesca)

According to its self-reported version, Cisco SD-WAN Solution is affected by a vulnerability due to insufficient authorization enforcement. An authenticated, local attacker can exploit this, by authenticating to the targeted device and executing commands, in order to elevate lower-level privilege...

Cisco SD-WAN Solution Software Privilege Escalation (cisco-sa-vmpresc-SyzcS4kC)

According to its self-reported version, Cisco SD-WAN Solution Software is affected by a privilege escalation vulnerability due to insufficient input validation. An authenticated, local attacker can exploit this by sending a crafted request in order to gain administrative privileges. Please see th...

Cisco SD-WAN vManage Software Information Disclosure (cisco-sa-vmanwebid-5QWMcCvt)

The version of Cisco SD-WAN vManage software installed on the remote host is affected by an information disclosure vulnerability as referenced in the cisco-sa-vmanwebid-5QWMcCvt advisory. - A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an...

NOTICE-OF-CHANGE ANNOUNCEMENT FOR CITRIX SD-WAN Software 11.2.X and 11.3.X Releases

Citrix Systems, Inc. announces a Notice of Status Change for the Citrix SD-WAN Software 11.2.X and 11.3.X Releases. The tables below explain the Citrix SD-WAN software lifecycle management milestones as well as important information regarding dates and options during this period. Citrix SD-WAN...

Cisco SD-WAN Solution Privilege Escalation (cisco-sa-20190619-sdwan-privilescal)

According to its self-reported version, Cisco SD-WAN Solution vManage software is affected by a privilege escalation vulnerability in the web-based UI due to a failure to properly authorize certain user actions in the device configuration. An authenticated, remote attacker can exploit this to gai...

Cisco SD-WAN Solution Packet Filtering Bypass (cisco-sa-20190807-sd-wan-bypass)

According to its self-reported version, Cisco SD-WAN Solution is affected by a vulnerability in the packet filtering features due to improper traffic filtering conditions on an affected device. An unauthenticated, remote attacker can exploit this, by crafting a malicious TCP packet with specific...

Cisco SD-WAN Solution vManage SQLi (cisco-sa-20200318-vmanage-cypher-inject)

The version of Cisco SD-WAN Solution vManage installed on the remote host is affected by a vulnerability as referenced in the cisco-sa-20200318-vmanage-cypher-inject advisory. - A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker t...

Cisco SD-WAN vManage Software SQL Injection Vulnerability (cisco-sa-vmanage-v78FubGV)

The version of Cisco SD-WAN vManage Software installed on the remote host is affected by a vulnerability as referenced in the cisco-sa-vmanage-v78FubGV advisory. - A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker ...

Cisco SD-WAN vManage Software SQLi (cisco-sa-sivm-M8wugR9O)

According to its self-reported version, Cisco SD-WAN vManage is affected by an SQL injection SQLi vulnerability in the web-based management interface due to not properly validating user-supplied input. An authenticated, remote attacker can exploit this, by sending crafted input that includes SQL...

Cisco SD-WAN vManage Software Command Injection (cisco-sa-clibypvman-sKcLf2L)

The version of Cisco SD-WAN vManage Software installed on the remote host is affected by a vulnerability as referenced in the cisco-sa-clibypvman-sKcLf2L advisory. - A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary comman...

Cisco SD-WAN vManage XSS (cisco-sa-vmanxss-z7bhvHpy)

The version of Cisco SD-WAN vManage installed on the remote host is prior affected by a vulnerability as referenced in the cisco-sa-vmanxss-z7bhvHpy advisory. - A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker...

Cisco SD-WAN vManage Software Path Traversal (cisco-sa-vmandowndir-CVGvdKM3)

The version of Cisco SD-WAN vManage Software installed on the remote host is affected by a vulnerability as referenced in the cisco-sa-vmandowndir-CVGvdKM3 advisory. - A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote...