CVE-2020-3374 Cisco SD-WAN vManage Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization, enabling them to access sensitive information, modify the system configuration, or impact the availability of the affected system. The...

CVE-2020-3374

CVE-2020-3374 affects the Cisco SD-WAN vManage Software web-based management interface. The vulnerability arises from insufficient authorization checks, allowing an authenticated, remote attacker to bypass authorization and gain privileges beyond their login, potentially accessing sensitive infor...

CVE-2020-3375 Cisco SD-WAN Solution Software Buffer Overflow Vulnerability

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic to an affected...

CVE-2020-3375 Cisco SD-WAN Solution Software Buffer Overflow Vulnerability

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic to an affected...

CVE-2020-3375

CVE-2020-3375 affects Cisco SD-WAN Solution Software. The root cause is insufficient input validation leading to a buffer overflow in the affected component when processing crafted network traffic. An unauthenticated, remote attacker could exploit this to access restricted information, modify the...

Cisco SD-WAN Solution Software Buffer Overflow Vulnerability (cisco-sa-sdbufof-h5f5VSeL)

According to its self-reported version, Cisco IOS XE SD-WAN Software is affected by a buffer overflow vulnerability. This could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could...

Cisco SD-WAN vManage Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization, enabling them to access sensitive information, modify the system configuration, or impact the availability of the affected system. The...

Cisco SD-WAN Solution Software Buffer Overflow Vulnerability

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic to an affected...

The vulnerability of the User Interface component of the Oracle SD-WAN Aware centralized system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the User Interface component of the Oracle SD-WAN Aware centralized management system is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

Cisco SD-WAN vManage Software Path Traversal Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A path traversal vulnerability exists in the Web management interface in Cisco SD-WAN vManage Software versions 19.2.2 and earlier, which stems from the program failing to...

Cisco SD-WAN vManage Software License Issue Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. An authorization issue vulnerability exists in the CLI in Cisco SD-WAN vManage Software that stems from insufficient input validation. A local attacker can exploit the...

Cisco SD-WAN vManage Software SQL Injection Vulnerability (CNVD-2020-42256)

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A SQL injection vulnerability exists in the web management interface in Cisco SD-WAN vManage Software versions prior to 18.4.5 and 19.2.3, which stems from the program failin...

Cisco SD-WAN vManage Software Resource Management Error Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A resource management error vulnerability exists in the web management interface in Cisco SD-WAN vManage Software versions prior to 19.2.3 and prior to 20.1.12, which stems...

Cisco IOS XE SD-WAN Software Command Injection Vulnerability (cisco-sa-xesdwcinj-AcQ5MxCn)

According to its self-reported version, Cisco IOS XE SD-WAN Software is affected by a command injection vulnerability. An authenticated attacker could allow to execute arbitrary command with root privileges due to insufficient input validation. Please see the included Cisco BIDs and Cisco Securit...

The vulnerability of the command-line interface (CLI) of the vManage web interface for programmatically defined Cisco SD-WAN networks allows a malicious actor to execute arbitrary commands with root privileges.

The vulnerability of the command-line interface CLI of the vManage web interface for the Cisco SD-WAN network is due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands with root privileges...

The vulnerability in the vManage web interface of the programmatically defined Cisco SD-WAN network allows a intruder to gain unauthorized access to protected information.

The vulnerability in the vManage web interface of the Cisco SD-WAN program-defined network is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Deep Packet Inspection (DPI) implementation in the SD-WAN vEdge 5000 Series and SD-WAN vEdge Cloud software allows a attacker to trigger a service failure.

The vulnerability of the Deep Packet Inspection DPI implementation in SD-WAN vEdge 5000 Series and SD-WAN vEdge Cloud software lies in unauthorized access to the indexed source. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Cisco SD-WAN vEdge 5000 Series Routers and SD-WAN vEdge Cloud Routers Denial of Service Vulnerability

Cisco SD-WAN vEdge 5000 Series Routers are Cisco's SD-WAN solution routing devices. A denial-of-service vulnerability exists in the deep packet inspection DPI engine in Cisco SD-WAN vEdge 5000 Series Routers and SD-WAN vEdge Cloud Routers, which stems from the program's failure to adequately hand...

Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A cross-site scripting vulnerability exists in the web management interface in Cisco SD-WAN vManage Software versions 19.2.2 and earlier, which stems from the program failing...

Cisco SD-WAN Solution Privilege Permission and Access Control Issues Vulnerability (CNVD-2020-42261)

Cisco SD-WAN Solution is a set of network extension solutions from Cisco. A privileged license and access control issue vulnerability exists in Cisco SD-WAN Solution, which stems from a user using a default static password. A local attacker could exploit this vulnerability to log in to an account...