CVE-2020-3593

Cisco SD-WAN Software contains a privilege-escalation vulnerability (CVE-2020-3593) that allows an authenticated, local attacker to gain root privileges on the host OS by sending a crafted request to a running utility. Root cause is insufficient input validation. Impact is elevated privileges wit...

CVE-2020-3593 Cisco SD-WAN Software Privilege Escalation Vulnerability

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to a utility...

CVE-2020-3592 Cisco SD-WAN vManage Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system. The vulnerability is due to insufficient authorization checking on an affected system. A...

CVE-2020-3592

CVE-2020-3592 affects Cisco SD-WAN vManage Software where the web-based management interface contains insufficient authorization checks. An authenticated, remote attacker can bypass authorization by sending crafted HTTP requests, potentially gaining privileges beyond the configured level and modi...

CVE-2020-3592 Cisco SD-WAN vManage Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system. The vulnerability is due to insufficient authorization checking on an affected system. A...

CVE-2020-3591

CVE-2020-3591 affects Cisco SD-WAN vManage’s web-based management interface. An authenticated, remote attacker can exploit insufficient input validation to induce a cross-site scripting (XSS) condition by luring a user to click a crafted link, potentially allowing arbitrary script execution in th...

CVE-2020-3591 Cisco SD-WAN vManage Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not...

CVE-2020-3591 Cisco SD-WAN vManage Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not...

CVE-2020-3590 Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user. The vulnerability exists because the web-based management interface does not properly validate...

CVE-2020-3590 Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user. The vulnerability exists because the web-based management interface does not properly validate...

CVE-2020-3590

Cisco SD-WAN vManage Software contains a cross-site scripting (XSS) vulnerability in the web-based management interface due to improper validation of user input. An authenticated, remote attacker can exploit this by persuading a user to click a crafted link, potentially executing arbitrary script...

CVE-2020-3587 Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user. The vulnerability exists because the web-based management interface does not properly validate...

CVE-2020-3587 Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user. The vulnerability exists because the web-based management interface does not properly validate...

CVE-2020-3587

Cisco SD-WAN vManage Software exposes a Cross-Site Scripting (XSS) vulnerability in its web-based management interface. The issue arises from improper validation of user-supplied input, allowing an authenticated, remote attacker to entice a user to click a crafted link and execute arbitrary scrip...

CVE-2020-3579 Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not properl...

CVE-2020-3579 Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not properl...

CVE-2020-3579

The CVE-2020-3579 issue affects Cisco SD-WAN vManage Software’s web-based management interface. The vulnerability is a Cross-Site Scripting (XSS) flaw caused by improper validation of user-supplied input, enabling an unauthenticated, remote attacker to lure a user with a crafted link and have arb...

CVE-2020-3444 Cisco SD-WAN Software Packet Filtering Bypass Vulnerability

A vulnerability in the packet filtering features of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by...

CVE-2020-3444 Cisco SD-WAN Software Packet Filtering Bypass Vulnerability

A vulnerability in the packet filtering features of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by...

CVE-2020-3444

Cisco SD-WAN Software contains a vulnerability in packet filtering where improper traffic filtering conditions could allow an unauthenticated, remote attacker to bypass L3/L4 filters by sending crafted TCP packets to a targeted device, potentially injecting arbitrary packets into the network. Aff...