4013 matches found
Cisco Catalyst SD-WAN Manager Stored XSS (cisco-sa-vmanage-xss-xhN8M5jt)
According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD- WAN vManage, could allow an authenticated, remote attacker to conduct a stored...
PT-2025-20276 · Cisco · Cisco Catalyst Sd-Wan Manager
Name of the Vulnerable Software and Affected Versions: Cisco Catalyst SD-WAN Manager affected versions not specified Description: A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an...
PT-2025-20246 · Cisco · Cisco Catalyst Sd-Wan Manager
Name of the Vulnerable Software and Affected Versions: Cisco Catalyst SD-WAN Manager affected versions not specified Description: A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker to gain privileges of the root user on the underlying operatin...
Cisco Catalyst SD-WAN Manager 路径遍历漏洞
Cisco Catalyst SD-WAN Manager Cisco SD-WAN vManage is a highly customizable dashboard from Cisco, Inc. that simplifies and automates the deployment, configuration, management, and operation of Cisco SD-WAN. A path traversal vulnerability exists in Cisco Catalyst SD-WAN Manager, which stems from...
Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite (cisco-sa-sdwan-fileoverwrite-Uc9tXWH)
According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of...
Cisco Catalyst SD-WAN Manager Reflected HTML Injection (cisco-sa-vmanage-html-inj-GxVtK6zj)
According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an...
Cisco Catalyst SD-WAN Manager 安全漏洞
Cisco Catalyst SD-WAN Manager is an API interface from Cisco for managing and configuring SD-WAN software-defined WAN devices. An elevation of privilege vulnerability exists in Cisco Catalyst SD-WAN Manager, which can be exploited by an attacker to cause an elevation of privilege...
PT-2025-20253 · Cisco · Cisco Catalyst Sd-Wan Manager
Name of the Vulnerable Software and Affected Versions: Cisco Catalyst SD-WAN Manager versions affected versions not specified Description: A vulnerability in certificate validation processing could allow an unauthenticated, remote attacker to gain access to sensitive information. This issue is du...
PT-2025-20249 · Cisco · Cisco Catalyst Sd-Wan Manager
Name of the Vulnerable Software and Affected Versions: Cisco Catalyst SD-WAN Manager versions affected versions not specified Description: A stored cross-site scripting attack XSS could be conducted by an authenticated, remote attacker on an affected system due to improper sanitization of user...
Cisco IOS XE Software Bootstrap Arbitrary File Write (cisco-sa-bootstrap-KfgxYgdh)
According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write arbitrary files to an affected system. This vulnerability is due to insufficient...
CVE-2025-4368
A vulnerability, which was classified as critical, was found in Tenda AC8 16.03.34.06. Affected is the function formGetRouterStatus of the file /goform/MtuSetMacWan. The manipulation of the argument shareSpeed leads to buffer overflow. It is possible to launch the attack remotely. The exploit has...
How to troubleshoot the connection between SD-WAN Orchestrator and an SD-WAN appliance?
...
CVE-2024-6199
An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS DDNS traffic between DDNS services and the modem, could manipulate specific responses to include code that forces a buffer overflow on the modem. Customers that have not enabled Dynamic DNS on their modem...
CVE-2024-6199
An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS DDNS traffic between DDNS services and the modem, could manipulate specific responses to include code that forces a buffer overflow on the modem. Customers that have not enabled Dynamic DNS on their modem...
CVE-2024-6199
CVE-2024-6199 describes an unauthenticated remote code execution vector on the WAN interface via interception of Dynamic DNS (DDNS) traffic, enabling an attacker to inject responses that trigger a buffer overflow in the modem. Reported impact includes ability to execute code on affected devices, ...
PT-2025-17903 · Viasat · Eg1000 +4
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS DDNS traffic between DDNS services and the modem, could manipulate specific responses to include...
CVE-2025-25454
Tenda AC10 V4.0siV16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanSpeed2...
Tenda AC10 安全漏洞
The Tenda AC10 is a home wireless router that provides a stable and fast internet connection. A buffer overflow vulnerability exists in Tenda AC10. The vulnerability stems from the AdvSetMacMtuWan function not validly checking the length of the incoming data when processing the wanMTU2 parameter...