Design/Logic Flaw

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

Input validation

A vulnerability in the command-line interface CLI in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability ...

Input validation

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a system image signed with a...

CVE-2018-0432 Cisco SD-WAN Solution Privilege Escalation Vulnerability

A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the error reporting applicatio...

CVE-2018-0433 Cisco SD-WAN Solution Command Injection Vulnerability

A vulnerability in the command-line interface CLI in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability ...

CVE-2018-15387 Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a system image signed with a...

CVE-2018-0432 Cisco SD-WAN Solution Privilege Escalation Vulnerability

A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the error reporting applicatio...

CVE-2018-0433 Cisco SD-WAN Solution Command Injection Vulnerability

A vulnerability in the command-line interface CLI in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability ...

CVE-2018-0434 Cisco SD-WAN Solution Certificate Validation Vulnerability

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

CVE-2018-15387 Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a system image signed with a...

CVE-2018-0432

CVE-2018-0432 affects Cisco SD-WAN Solution. An authenticated, remote attacker could exploit the error reporting feature by crafting commands due to improper validation of error-reporting configuration parameters, potentially gaining root-level privileges and full control of the device. Public so...

CVE-2018-0433

CVE-2018-0433 describes a local, authenticated command-injection vulnerability in the Cisco SD-WAN Solution CLI caused by insufficient input validation. Affected: Cisco SD-WAN Solution (CLI) on eligible devices; an attacker who can authenticate to the CLI can craft input that leads to arbitrary c...

CVE-2018-0434

CVE-2018-0434 describes a certificate validation weakness in Cisco SD-WAN Solution’s Zero Touch Provisioning. The flaw stems from insufficient validation of certificates, allowing an unauthenticated, remote attacker who can present a crafted certificate to gain unauthorized access and perform man...

CVE-2018-15387

The CVE-2018-15387 issue affects Cisco SD-WAN Solution (Cisco SD-WAN components) where improper certificate validation lets an unauthenticated, remote attacker bypass cert checks by supplying a system image signed with a crafted certificate, potentially deploying a crafted image. Connected source...

PT-2018-8823

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution affected versions not specified Description A vulnerability in the error reporting feature could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The issue is due to a failure to...

PT-2018-8824

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution affected versions not specified Description A vulnerability in the command-line interface CLI could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The issue is...

PT-2018-8825

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution affected versions not specified Description The issue is related to insufficient certificate validation in the Zero Touch Provisioning feature, allowing an unauthenticated, remote attacker to gain unauthorized access to...

CVE-2018-0434: Improper Certificate Validation

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

CVE-2018-0432: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the error reporting applicatio...

CVE-2018-15387: Improper Input Validation

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a system image signed with a...