Critical Cisco SD-WAN, HyperFlex Bugs Menace Networks

🗓️ 06 May 2021 17:54:33Reported by Tara SealsType

threatpost

threatpost🔗 threatpost.com👁 120 Views

Critical vulnerabilities in Cisco SD-WAN vManage and HyperFlex HX platfor

Reporter	Title	Published	Views	Family All 104
0day.today	Cisco HyperFlex HX Data Platform Command Execution Exploit	4 Jun 202100:00	–	zdt
ICS	Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors	6 Oct 202212:00	–	ics
ATTACKERKB	CVE-2021-1497	5 May 202100:00	–	attackerkb
ATTACKERKB	CVE-2021-1498	5 May 202100:00	–	attackerkb
Information Security Automation	Last Week’s Security news: Cisco ASA, BIG-IQ, vSphere, Solaris, Dlink, iPhone %s, DarkRadiation, Google schema, John McAfee	28 Jun 202110:59	–	avleonov
Information Security Automation	Joint Advisory AA22-279A and Vulristics	21 Oct 202220:10	–	avleonov
BDU FSTEC	The vulnerability of the web interface of the Cisco HyperFlex virtual machine installer allows a attacker to execute arbitrary commands on the target system with root user privileges.	19 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the programmatically defined Cisco SD-WAN network component allows a attacker to trigger a service failure.	19 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface for controlling the Cisco HyperFlex data platform allows a attacker to execute arbitrary commands on the target system with user-level privileges on the Tomcat8 server.	19 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the programmatically defined Cisco SD-WAN messaging service allows a hacker to create new administrative-level user accounts.	19 May 202100:00	–	bdu_fstec

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-vmanage-4TbynnhZ
threatpost	www.threatpost.com/webinars/fortifying-your-business-against-attacks/
threatpost	www.threatpost.com/webinars/fortifying-your-business-against-attacks/
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hyperflex-rce-TjjNrkpR
threatpost	www.threatpost.com/cisco-critical-security-flaw/164255/
threatpost	www.threatpost.com/cisco-flaw-cmx-software-retailers/163027/
threatpost	www.threatpost.com/webinars/fortifying-your-business-against-attacks/
threatpost	www.threatpost.com/webinars/fortifying-your-business-against-attacks/
threatpost	www.threatpost.com/webinars/fortifying-your-business-against-attacks/

06 May 2021 17:54Current

8.1High risk

Vulners AI Score8.1

CVSS 3.19.8

CVSS 210

EPSS0.99999

SSVC

cisco sd-wan vmanage hyperflex security vulnerabilities remote code execution denial-of-service privilege escalation