Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

27 records in Sd-wan · all components

Priority CRITICAL 93KEV

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.11984 Published 2022-09-30 No fix listed CWE-25
Priority HIGH 69

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00616 Published 2022-09-30 No fix listed CWE-25
Priority MEDIUM 63

A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to write arbitrary files to an affected system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.58546 Published 2020-11-06 No fix listed CWE-22
Priority MEDIUM 55

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03902 Published 2020-07-31 No fix listed CWE-119
Priority MEDIUM 51

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01099 Published 2018-10-05 No fix listed CWE-20
Priority MEDIUM 47

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization, enabling them to access sensitive information, modify the syst…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01917 Published 2020-07-31 No fix listed CWE-285
Priority MEDIUM 47

A vulnerability in the vManage web-based UI (Web UI) in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.04255 Published 2019-06-20 Fixed in 18.4.0 CWE-77
Priority MEDIUM 46

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03475 Published 2019-01-24 No fix listed CWE-20
Priority MEDIUM 41

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00261 Published 2023-03-23 No fix listed CWE-352
Priority LOW 38

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, adjacent attacker to bypass authentication and have direct unauthorized access to other vSmart containers.

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00808 Published 2019-01-24 No fix listed CWE-284
Priority LOW 36

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00286 Published 2020-11-06 No fix listed CWE-269
Priority LOW 36

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root group on the underlying operating system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00286 Published 2020-11-06 No fix listed CWE-269
Priority LOW 36

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00286 Published 2020-11-06 No fix listed CWE-269
Priority LOW 36

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00286 Published 2020-11-06 No fix listed CWE-269
Priority LOW 36

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected device by using an account that has a default, static password.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00284 Published 2020-07-16 No fix listed CWE-264
Priority LOW 36

A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local attacker to gain elevated privileges on an affected device.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00372 Published 2019-01-24 No fix listed CWE-264
Priority LOW 36

A vulnerability in the local CLI of the Cisco SD-WAN Solution could allow an authenticated, local attacker to escalate privileges and modify device configuration files.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00446 Published 2019-01-24 No fix listed CWE-264
Priority LOW 35

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00218 Published 2022-04-15 No fix listed CWE-284
Priority LOW 34

Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to access the Elasticsearch configuration database of an affected device with the p…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00789 Published 2023-09-27 No fix listed CWE-798
Priority LOW 32

A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthenticated, remote attacker to access the GUI of Cisco SD-AVC using a…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00922 Published 2022-09-30 No fix listed CWE-798
Priority LOW 32

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system of an affected de…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00366 Published 2021-09-23 No fix listed CWE-77
Priority LOW 32

A vulnerability in the Multiprotocol Label Switching (MPLS) packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to gain access to information stored in MPLS buffer memory.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01188 Published 2021-07-22 No fix listed CWE-126
Priority LOW 31

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on an affected system.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00255 Published 2022-09-30 No fix listed CWE-88
Priority LOW 31

A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0021 Published 2022-09-30 No fix listed CWE-22
Priority LOW 31

A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to overwrite arbitrary files on the local system.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0025 Published 2021-09-23 No fix listed CWE-61
Load more
Open these records in search →