CVE-2023-20214

Cisco SD-WAN vManage REST API authentication validation vulnerability (CVE-2023-20214) allows unauthenticated remote attackers to read or partially modify configuration due to insufficient REST API request validation. Affected product: Cisco SD-WAN vManage (REST API surface only; web UI/CLI unaff...

CVE-2023-20252

CVE-2023-20252 affects Cisco Catalyst SD-WAN Manager (Cisco vManage) SAML API authentication. Root cause: improper authentication checks in SAML API endpoints allow unauthenticated remote attackers to obtain an authorization token and gain access as an arbitrary user. Impact: high – remote unauth...

CVE-2022-20747

The CVE-2022-20747 concern is Cisco SD-WAN vManage Software Information Disclosure via the History API. Root cause: insufficient API authorization checks on the underlying OS, enabling an authenticated, lower-privileged user to access sensitive information. Affected component: History API in Cisc...

CVE-2026-20127

CVE-2026-20127 concerns a vulnerability in the peering authentication of Cisco Catalyst SD-WAN Controller (formerly SD-WAN vSmart) and Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage). The flaw allows an unauthenticated, remote attacker to bypass authentication and obtain administrative pr...

CVE-2022-20734

CVE-2022-20734 – Cisco SD-WAN vManage Software.Information disclosure due to insufficient filesystem restrictions. An authenticated local attacker with netadmin privileges can access the vshell and read sensitive OS information. Connected sources indicate this is a local, authenticated L2/L3 vect...

CVE-2026-20245

Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage) is affected by CVE-2026-20245. The vulnerability arises from insufficient validation of user-supplied input in the CLI, enabling an authenticated, local attacker to upload a crafted file and perform command injection, potentially elevating p...

CVE-2026-20262

Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage) exposes an Arbitrary File Write vulnerability in its web UI. An authenticated, lower-privileged user can craft requests to a file-upload API endpoint to create/overwrite files on the OS, with potential for root escalation. Cisco has released...

CVE-2026-20182

Cisco Catalyst SD-WAN Controller (vSmart) and SD-WAN Manager (vManage) are affected by CVE-2026-20182, a critical authentication bypass in the DTLS vdaemon challenge flow. The issue permits a remote, unauthenticated attacker to masquerade as a trusted peer by sending a CHALLENGE_ACK with device t...

CVE-2022-20735

Cisco SD-WAN vManage Software is affected by a CSRF vulnerability in its web-based management interface. The issue arises from insufficient CSRF protections, allowing an unauthenticated, remote attacker to induce actions on behalf of a logged-in user (e.g., modifying configurations or deleting ac...

CVE-2020-26073

Cisco SD-WAN vManage Software is affected by a directory traversal/local file inclusion issue in the application data endpoints (APIs). It enables an unauthenticated attacker to read sensitive files and tokens via crafted API requests. The core issue is improper validation of directory traversal ...

CVE-2021-1300

CVE-2021-1300 corresponds to Cisco SD-WAN Buffer Overflow vulnerabilities. Connected sources indicate multiple buffer-overflow flaws in Cisco SD-WAN products that could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges by crafting IP traffic or abusing IP ha...

CVE-2022-20716

CVE-2022-20716 concerns Cisco SD-WAN Software where an authenticated, local attacker can gain escalated privileges due to improper access control on files. The root cause is file-level access control weaknesses within the CLI-facing components, enabling an attacker to modify certain files on the ...

CVE-2021-1479

CVE-2021-1479 affects Cisco SD-WAN vManage Software. The vulnerability is a set of issues (including a buffer overflow in the remote management component) that could let an unauthenticated, remote attacker execute arbitrary code, or a local authenticated attacker escalate privileges to root. Evid...

CVE-2022-20775

Cisco CVE-2022-20775 affects the Cisco Catalyst SD-WAN Controller/Manager CLI. It is a local, authenticated privilege-escalation in the CLI caused by improper access controls on commands, enabling an attacker to run commands as root. Cisco released updates addressing this, with no workarounds. Af...

CVE-2021-1233

Cisco SD-WAN Software faces an information-disclosure vulnerability in its CLI, caused by insufficient input validation of requests to the iperf tool. An authenticated, local attacker could craft a request to iperf to read arbitrary files from the device filesystem. Affected product: Cisco SD-WAN...

CVE-2021-1275

CVE-2021-1275 maps to Cisco SD-WAN vManage Software with multiple vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or a logged-in attacker to escalate privileges or access the application. The issues affect the...

CVE-2021-1234

Affected product/edition: Cisco SD-WAN vManage Software (cluster mode)\nVulnerability summary: In the cluster management interface, there is an absence of authentication for sensitive information, allowing an unauthenticated, remote attacker to view sensitive data by sending a crafted request.\nR...

CVE-2021-1480

Cisco SD-WAN vManage Software contains multiple vulnerabilities that could allow an unauthenticated remote attacker to execute code or a local authenticated attacker to gain root privileges, with a specific issue in the file-transfer path due to improper input validation. Several connected source...

CVE-2020-3592

CVE-2020-3592 affects Cisco SD-WAN vManage Software where the web-based management interface contains insufficient authorization checks. An authenticated, remote attacker can bypass authorization by sending crafted HTTP requests, potentially gaining privileges beyond the configured level and modi...

CVE-2022-20739

CVE-2022-20739 describes a privilege-escalation flaw in the CLI of Cisco SD-WAN vManage Software. An authenticated, low-privileged user can trigger execution of a file that is later executed by a root user when an admin runs specific commands, allowing escalation to root. Affected: Cisco SD-WAN v...

CVE-2021-1513

The CVE-2021-1513 vulnerability affects Cisco SD-WAN Software’s vDaemon process. It allows an unauthenticated, remote attacker to trigger a device reload and DoS via crafted malformed packets sent to an affected device. Impact is a denial of service with potential device reloads; available metric...

CVE-2021-1528

CVE-2021-1528 affects Cisco SD-WAN Software. The vulnerability is in the CLI where access to privileged processes is not properly restricted, allowing an authenticated, local attacker to escalate privileges and potentially execute actions with root-level privileges. Impact is elevated privileges ...

CVE-2021-1137

CVE-2021-1137 affects Cisco SD-WAN vManage Software. The vulnerability lies in the user management function due to insufficient input validation , enabling an authenticated, local attacker to gain root privileges on the underlying OS (privilege escalation). The Nessus entry notes this is tied to ...

CVE-2022-20696

Affected software : Cisco SD-WAN vManage Software containers. Vulnerability : binding configuration allows an unauthenticated, adjacent attacker with access to the VPN0 logical network to reach the messaging service ports due to insufficient protection. Impact : attacker can view and inject messa...

CVE-2021-1278

CVE-2021-1278 is part of Cisco SD‑WAN DoS vulnerabilities affecting multiple Cisco SD‑WAN products. The connected sources indicate an unauthenticated, remote attacker can cause denial of service on affected devices (e.g., reboot or DoS) via the vulnerability set described in Cisco advisory Cisco ...

CVE-2023-20261

Cisco Catalyst SD-WAN Manager web UI Local File Inclusion (CVE-2023-20261) allows an authenticated remote attacker to read arbitrary files from the underlying Linux filesystem by abusing improper validation of parameters in the web UI. Affected component is the web UI of Cisco Catalyst SD-WAN Man...

CVE-2020-26071

CVE-2020-26071 affects Cisco SD-WAN Software CLI. The issue is caused by insufficient input validation for specific commands, allowing an authenticated, local attacker to create or overwrite arbitrary files on an affected device, potentially leading to a DoS. Cisco has released software updates a...

CVE-2021-1241

CVE-2021-1241 corresponds to Cisco SD-WAN DoS vulnerabilities in VPN tunneling features. The issue allows an unauthenticated, remote attacker to cause a reboot/DoS by sending crafted packets to affected devices. The vulnerability is part of Cisco SD-WAN product family (e.g., vEdge routers); root ...

CVE-2021-1505

Cisco SD-WAN vManage Software is affected by multiple vulnerabilities (CVE-2021-1505 among others) in its web management interface allowing unauthenticated remote code execution or information disclosure, and, for authenticated local attackers, privilege escalation. Root causes relate to insuffic...

CVE-2022-20930

Cisco SD-WAN Software CLI vulnerability (CVE-2022-20930) allows an authenticated, local attacker to inject commands via insufficient input validation, potentially overwriting arbitrary system files with root privileges and causing DoS. Affected component: CLI of Cisco SD-WAN Software. Root cause:...

CVE-2020-3591

CVE-2020-3591 affects Cisco SD-WAN vManage’s web-based management interface. An authenticated, remote attacker can exploit insufficient input validation to induce a cross-site scripting (XSS) condition by luring a user to click a crafted link, potentially allowing arbitrary script execution in th...

CVE-2026-20122

Cisco Catalyst SD-WAN Manager API vulnerability (CVE-2026-20122) affects the Cisco Catalyst SD-WAN Manager, including the Data Collection Agent service. The root cause is improper file handling and privileged API usage on the API interface, enabling an authenticated, remote attacker with valid re...

CVE-2020-3579

The CVE-2020-3579 issue affects Cisco SD-WAN vManage Software’s web-based management interface. The vulnerability is a Cross-Site Scripting (XSS) flaw caused by improper validation of user-supplied input, enabling an unauthenticated, remote attacker to lure a user with a crafted link and have arb...

CVE-2020-3590

Cisco SD-WAN vManage Software contains a cross-site scripting (XSS) vulnerability in the web-based management interface due to improper validation of user input. An authenticated, remote attacker can exploit this by persuading a user to click a crafted link, potentially executing arbitrary script...

CVE-2021-1262

CVE-2021-1262 concerns multiple command-injection vulnerabilities in Cisco SD-WAN products. An authenticated attacker could exploit these flaws to run commands on an affected device with root privileges . The CVE is discussed across multiple sources (including Cisco’s advisory), which confirms a ...

CVE-2021-1279

CVE-2021-1279 describes DoS vulnerabilities in Cisco SD-WAN products where an unauthenticated, remote attacker can crash/restart affected devices. The root cause cited is insufficient input validation in the SNMPv3 protocol implementation. Covered products include Cisco SD‑WAN edge devices and re...

CVE-2021-1302

Cisco SD-WAN vManage Security Advisory details a set of authorization bypass vulnerabilities in the web-based management interface. An authenticated remote attacker can bypass authorization to modify configurations and access sensitive information not authorized for their tenant. Affected product...

CVE-2021-1514

CVE-2021-1514 is a Cisco SD-WAN Software privilege-escalation vulnerability. The issue arises from insufficient input validation in certain CLI commands, enabling an authenticated, low-privileged local attacker to inject and execute arbitrary commands with Administrator privileges on the underlyi...

CVE-2023-20098

Cisco SD-WAN vManage Software’s CLI has a directory-traversal filtering flaw in system commands. An authenticated, local attacker with administrative privileges could exploit this to delete arbitrary files, including root-owned files. Root cause: improper filtering of directory traversal sequence...

CVE-2026-20108

The CVE-2026-20108 affects Cisco Catalyst SD-WAN Manager’s web-based management interface. The issue is insufficient validation of user input , enabling an authenticated, remote attacker to entice a user to click a crafted link and trigger cross-site scripting . Successful exploitation could exec...

CVE-2020-26065

CVE-2020-26065 affects Cisco SD-WAN vManage Web UI. The issue is path traversal caused by insufficient validation of HTTP requests, allowing an authenticated, remote attacker to read arbitrary files. Exploitation requires sending crafted HTTP requests containing directory traversal sequences. Cis...

CVE-2021-1284

CVE-2021-1284 describes an authentication bypass vulnerability in the web-based messaging service interface of Cisco SD-WAN vManage Software. An unauthenticated, adjacent attacker can exploit crafted HTTP requests to bypass authentication/authorization and gain unauthenticated read and write acce...

CVE-2021-1301

Cisco SD-WAN Buffer Overflow Vulnerabilities (CVE-2021-1301) affect Cisco SD-WAN products. The issues allow an unauthenticated, remote attacker to execute attacks against an affected device due to multiple buffer overflow vulnerabilities. CVSSv3.1 score is 9.8 (CRITICAL) with NETWORK attack vecto...

CVE-2021-1506

Cisco SD-WAN vManage Software contains multiple vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code or access sensitive information, or allow an authenticated, local attacker to gain elevated privileges. Affected component: Cisco SD-WAN vManage Software;...

CVE-2021-1482

CVE-2021-1482 concerns Cisco SD-WAN vManage Software, where the web-based management interface contains insufficient authorization checks. An authenticated, remote attacker could send crafted HTTP requests to bypass authorization and access sensitive information on the affected system. The CVSS 3...

CVE-2025-20122

CVE-2025-20122 affects Cisco Catalyst SD-WAN Manager (formerly Cisco SD-WAN vManage). The vulnerability stems from insufficient input validation in the CLI, enabling an authenticated, local attacker with read-only privileges to craft a request that could grant root privileges on the underlying OS...

CVE-2025-20187

Cisco Catalyst SD-WAN Manager (formerly Cisco SD-WAN vManage) contains a vulnerability in the application data endpoints that could allow an authenticated, remote attacker to write arbitrary files via directory traversal due to improper API request validation. Exploitation would require sending m...

CVE-2021-1481

Cisco SD-WAN vManage Software is affected by CVE-2021-1481, a Cypher Query Language injection via the web-based management interface caused by insufficient input validation. An authenticated attacker could exploit this by sending crafted HTTP requests to the interface to obtain sensitive informat...

CVE-2021-1486

CVE-2021-1486 describes an information‑disclosure vulnerability in Cisco SD-WAN vManage Software. An unauthenticated, remote attacker can enumerate valid user accounts by exploiting improper handling of HTTP headers, by sending requests to the affected system and comparing HTTP responses. Connect...

CVE-2020-3587

Cisco SD-WAN vManage Software exposes a Cross-Site Scripting (XSS) vulnerability in its web-based management interface. The issue arises from improper validation of user-supplied input, allowing an authenticated, remote attacker to entice a user to click a crafted link and execute arbitrary scrip...