Cisco SD-WAN Solution Buffer Overflow Vulnerability

A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic to an affected device...

Cisco SD-WAN Solution Privilege Escalation Vulnerability

A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to ...

PT-2020-1929 · Cisco · Cisco Sd-Wan Solution

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN Solution software affected versions not specified Description: The issue is related to insufficient input validation in the CLI of Cisco SD-WAN Solution software, allowing an authenticated, local attacker to inject arbitrary...

Zyxel CNM SecuManager 3.1.0 / 3.1.1 Hardcoded Keys / XSS / Code Execution Vulnerabilities

Zyxel CNM SecuManager versions 3.1.0 and 3.1.1 suffer from having hard-coded secrets, missing authentication, backdoors, and remote code execution vulnerabilities. Zyxel CNM SecuManager 3.1.0 / 3.1.1 Hardcoded Keys / XSS / Code Execution The HTML version on "Multiple vulnerabilities found in Zyxe...

Citrix Systems SD-WAN Trust Management Issue Vulnerability

Citrix Systems SD-WAN is a suite of software-defined WAN solutions from Citrix Systems USA. A vulnerability with trust management issues exists in Citrix Systems SD-WAN versions 10.2.x prior to 10.2.6 and 11.0.x prior to 11.0.3. The vulnerability stems from the lack of an effective trust manageme...

CVE-2020-6175

Citrix SD-WAN 10.2.x before 10.2.6 and 11.0.x before 11.0.3 has Missing SSL Certificate Validation...

CVE-2020-6175

Citrix SD-WAN 10.2.x before 10.2.6 and 11.0.x before 11.0.3 has Missing SSL Certificate Validation...

Input validation

Citrix SD-WAN 10.2.x before 10.2.6 and 11.0.x before 11.0.3 has Missing SSL Certificate Validation...

CVE-2020-6175

Citrix SD-WAN 10.2.x before 10.2.6 and 11.0.x before 11.0.3 has Missing SSL Certificate Validation...

CVE-2020-6175

Citrix SD-WAN vulnerability CVE-2020-6175 affects Citrix SD-WAN 10.2.x prior to 10.2.6 and 11.0.x prior to 11.0.3, caused by Missing SSL Certificate Validation in management traffic. This leads to information disclosure via a potential man-in-the-middle attack on management interfaces. Remediatio...

Citrix Systems SD-WAN Center and NetScaler SD-WAN Center Cross-Site Scripting Vulnerability

Citrix Systems SD-WAN Center and NetScaler SD-WAN Center are both products of Citrix Systems, Inc. SD-WAN Center is a centralized management system. SD-WAN Center is a centralized management system that configures, monitors, and analyzes all Citrix SD-WAN devices on the WAN.NetScaler SD-WAN Cente...

CVE-2019-11345

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS...

CVE-2019-11345

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS...

Cross site scripting

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS...

CVE-2019-11345

Citrix SD-WAN Center and NetScaler SD-WAN Center are affected by CVE-2019-11345, an XSS vulnerability in the management console. Affected versions are Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7. The root cause is a cross-site scripting flaw that cou...

CVE-2019-11345

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS...

Apache JServ Protocol (AJP) Public WAN (Internet) / Public LAN Accessible (TCP)

The script checks if the target host is running a service supporting the Apache JServ Protocol AJP accessible from a public WAN Internet / public LAN. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

CVE-2019-1950

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default credentials within the default configuration of an affected device. An attacker who has access to ...

CVE-2019-1950

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default credentials within the default configuration of an affected device. An attacker who has access to ...

Design/Logic Flaw

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default credentials within the default configuration of an affected device. An attacker who has access to ...