CVE-2021-1528

CVE-2021-1528 affects Cisco SD-WAN Software. The vulnerability is in the CLI where access to privileged processes is not properly restricted, allowing an authenticated, local attacker to escalate privileges and potentially execute actions with root-level privileges. Impact is elevated privileges ...

CVE-2021-1513

The CVE-2021-1513 vulnerability affects Cisco SD-WAN Software’s vDaemon process. It allows an unauthenticated, remote attacker to trigger a device reload and DoS via crafted malformed packets sent to an affected device. Impact is a denial of service with potential device reloads; available metric...

CVE-2021-1514

CVE-2021-1514 is a Cisco SD-WAN Software privilege-escalation vulnerability. The issue arises from insufficient input validation in certain CLI commands, enabling an authenticated, low-privileged local attacker to inject and execute arbitrary commands with Administrator privileges on the underlyi...

CVE-2021-1509

CVE-2021-1509 concerns Cisco SD-WAN vEdge Software buffer overflow vulnerabilities. Attackers could execute arbitrary code as root or cause DoS by sending crafted traffic. Cisco advisory states multiple vulnerabilities and that software updates address these issues; no workaround is indicated her...

CVE-2021-1546

CVE-2021-1546 is a Cisco SD-WAN Software CLI information-disclosure vulnerability. The issue stems from improper protections on file access through the CLI, allowing an authenticated, local attacker to run a CLI command that targets an arbitrary local file and potentially read portions of that fi...

CVE-2018-0344

The CVE-2018-0344 entry describes a vulnerability in the Cisco SD-WAN Solution where the vManage dashboard’s login parameter validation is insufficient, enabling an authenticated, remote attacker to inject and execute arbitrary commands with vManage user privileges by configuring a malicious user...

CVE-2021-1512

CVE-2021-1512 concerns Cisco SD-WAN Software. The vulnerability arises from insufficient validation of user-supplied parameters for a specific CLI command, enabling an authenticated, local attacker to overwrite arbitrary files on the host file system. Affected product: Cisco SD-WAN Software (Vipt...

CVE-2018-0343

The CVE-2018-0343 issue affects Cisco SD-WAN Solution components running before Release 18.3.0, including vBond Orchestrator, vEdge routers, vManage, and vSmart. Root cause: insufficient access restrictions on the HTTP management interface of the Configuration and Management Service, allowing an ...

CVE-2018-0349

Cisco SD-WAN Solution contains a vulnerability (CVE-2018-0349) where an authenticated, remote attacker could overwrite arbitrary files on the device by abusing improper input validation of the request admin-tech command in the CLI. A successful exploit could escalate privileges to root. Affected ...

CVE-2018-0345

The CVE-2018-0345 issue exists in Cisco SD-WAN’s configuration and management database, caused by insufficient validation of command arguments. An authenticated, remote attacker could run arbitrary commands with the privileges of the vmanage user, affecting vBond Orchestrator, vManage Network Man...

CVE-2021-1511

CVE-2021-1511 refers to multiple buffer-overflow vulnerabilities in Cisco SD-WAN vEdge Software. The affected component is the vEdge forwarding/error‑correction path, allowing an attacker to execute arbitrary code as root or cause a DoS on a vulnerable device. Exploitation appears to be network‑b...

CVE-2021-1510

CVE-2021-1510 corresponds to Cisco SD-WAN vEdge Software vulnerabilities, collectively described as buffer overflow issues in the vEdge component with potential to execute arbitrary code as root or cause DoS. Connected sources specify a buffer overflow vulnerability (e.g., in packet mirroring) th...

CVE-2018-0350

Cisco SD-WAN Solution VPN subsystem command injection (CVE-2018-0350) is caused by insufficient input validation in the VPN configuration parameters. An authenticated, remote attacker could submit crafted input after authenticating to the device and execute commands with root privileges. Affected...

CVE-2018-0342

The CVE-2018-0342 issue affects Cisco SD-WAN Solution components (vBond Orchestrator, vEdge routers, vManage, vSmart, etc.) prior to Release 18.3.0, caused by incomplete bounds checks in the Configuration and Monitoring Service. Exploitation involves sending malicious data to the vDaemon listenin...

CVE-2018-0348

Cisco SD-WAN Solution CVE-2018-0348 is a command-injection vulnerability in the CLI due to insufficient input validation. It affects vBond Orchestrator Software, vEdge 100/1000/2000/5000 Series Routers, vEdge Cloud Router Platform, vManage Network Management Software, and vSmart Controller Softwa...

CVE-2018-0351

Cisco SD-WAN Solution contains a local command injection vulnerability in the command-line tcpdump utility. The issue arises from insufficient input validation, enabling an authenticated, local attacker to submit crafted input to tcpdump and execute commands with root privileges. Affected product...

CVE-2018-0347

CVE-2018-0347 concerns Cisco SD-WAN Solution ZTP: an authenticated, local attacker can inject commands with root privileges due to insufficient input validation. Affected are vEdge 100/1000/2000/5000 Series routers running releases prior to 18.3.0. Cisco’s advisory and associated CVE record confi...

CVE-2018-0346

Cisco SD-WAN Solution Zero Touch Provisioning contains a DoS vulnerability (CVE-2018-0346) in the Zero Touch Provisioning service on vBond Orchestrator, vManage, and vSmart software prior to release 18.3.0. The issue stems from improper bounds checks on values in packets sent to the service, whic...