PT-2021-1974

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers affected versions not specified Description: The issue is related to improper validation of user-supplied input in the web-based management interface of the affected...

PT-2021-1949

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers affected versions not specified Description The issue is related to improper validation of user-supplied input in the web-based management interface of the affected...

PT-2021-1936

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers affected versions not specified Description The issue is related to improper validation of user-supplied input in the web-based management interface, allowing an...

PT-2021-1952

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 affected versions not specified Description The issue is related to insufficient validation of user-supplied input in the web-based management interface, which could allow a...

Cisco SD-WAN vManage Authorization Bypass (cisco-sa-sdwan-abyp-TnGFHrS)

According to its self-reported version, Cisco SD-WAN vManage is affected by multiple authorization bypass vulnerabilities: - An authorization bypass vulnerability exists in the web-based management interface due to insufficient authorization checks. An authenticated, remote attacker can exploit...

Critical Cisco SD-WAN Bugs Allow RCE Attacks

Cisco is warning of multiple, critical vulnerabilities in its software-defined networking for wide-area networks SD-WAN solutions for business users. Cisco issued patches addressing eight buffer-overflow and command-injection SD-WAN vulnerabilities. The most serious of these flaws could be...

CVE-2021-1222

A vulnerability in the web-based management interface of Cisco Smart Software Manager Satellite could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates values...

Sql injection

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities exist because the web-based management interface improperly validates value...

CVE-2021-1257

A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to manipulate an authenticated user into executing malicious actions without their awareness or consent. The...

CVE-2021-1222 Cisco Smart Software Manager Satellite SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Smart Software Manager Satellite could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates values...

CVE-2021-1222 Cisco Smart Software Manager Satellite SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Smart Software Manager Satellite could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates values...

CVE-2021-1225

CVE-2021-1225 corresponds to SQL injection vulnerabilities in Cisco SD-WAN vManage’s web-based management interface, caused by improper validation of SQL queries. This could allow an unauthenticated, remote attacker to modify or retrieve values from the underlying database or operating system. Ci...

CVE-2021-1253 Cisco Data Center Network Manager Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM could allow a remote attacker with network-operator privileges to conduct a cross-site scripting XSS attack or a reflected file download RFD attack against a user of the interface. For more...

CVE-2021-1257

CVE-2021-1257 affects Cisco DNA Center (web-based management interface) with CSRF in versions prior to 2.1.2.0. An unauthenticated, remote attacker can lure a logged-in user to a crafted link, causing actions on the device with the user’s privileges, including modifying configuration, disconnecti...

CVE-2021-1270

CVE-2021-1270 affects Cisco Data Center Network Manager (DCNM) via vulnerabilities in the web-based management interface that allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. The root cause is failure to properly restrict access to administrat...

CVE-2021-1304

Cisco SD-WAN vManage web-based management interface contains authorization bypass vulnerabilities (CVE-2021-1304). An authenticated, remote attacker can bypass authorization to modify configurations and access sensitive information they are not authorized to view. Root cause cited in public advis...

Cisco Data Center Network Manager Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM could allow a remote attacker with network-operator privileges to conduct a cross-site scripting XSS attack or a reflected file download RFD attack against a user of the interface. For more...

Cisco Smart Software Manager Satellite SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Smart Software Manager Satellite could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates values...

CVE-2021-1304: Improper Input Validation

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not...

PT-2021-1879

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM affected versions not specified Description The issue is related to improper authorization in the web-based management interface of Cisco Data Center Network Manager DCNM, allowing an authenticated, remot...