Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

41 records

Priority MEDIUM 46

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01402 Published 2021-01-20 No fix listed CWE-119
Priority LOW 20

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information on an affected device.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00324 Published 2021-01-20 No fix listed CWE-20
Priority MEDIUM 43

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, ga…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01312 Published 2021-01-20 No fix listed CWE-20
Priority LOW 39

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01446 Published 2021-01-20 No fix listed CWE-20
Priority LOW 39

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01446 Published 2021-01-20 No fix listed CWE-20
Priority LOW 37

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01364 Published 2021-01-20 No fix listed CWE-20
Priority LOW 39

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01459 Published 2021-01-20 No fix listed CWE-20
Priority MEDIUM 47

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01901 Published 2021-01-20 No fix listed CWE-119
Priority MEDIUM 47

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01917 Published 2021-01-20 No fix listed CWE-119
Priority MEDIUM 47

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01676 Published 2021-01-20 No fix listed CWE-119
Priority MEDIUM 46

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01402 Published 2021-01-20 No fix listed CWE-119
Priority MEDIUM 44

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02169 Published 2021-01-20 No fix listed CWE-20
Priority MEDIUM 44

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02169 Published 2021-01-20 No fix listed CWE-20
Priority MEDIUM 53

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02159 Published 2021-01-20 No fix listed CWE-119
Priority MEDIUM 53

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0213 Published 2021-01-20 No fix listed CWE-119
Priority LOW 26

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00993 Published 2020-07-16 No fix listed CWE-89
Priority LOW 34

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of the device.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02877 Published 2020-07-16 No fix listed CWE-59
Priority LOW 26

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00819 Published 2020-07-16 No fix listed CWE-79
Priority LOW 34

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain read access to sensitive files on an affec…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02646 Published 2020-07-16 No fix listed CWE-22
Priority LOW 35

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.01281 Published 2020-07-16 No fix listed CWE-611
Priority LOW 36

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00377 Published 2020-07-16 No fix listed CWE-287
Priority MEDIUM 55

A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to execute code with root privileges on an affected system.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.1302 Published 2020-07-16 No fix listed CWE-20
Priority LOW 29

A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected system.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00526 Published 2020-07-16 No fix listed CWE-371
Priority MEDIUM 45

A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct directory traversal attacks and obtain read and write access to sensitive files on…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02644 Published 2020-07-16 No fix listed CWE-22
Priority LOW 34

A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated, local attacker to elevate privileges to Administrator on the underlying operating system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00351 Published 2020-07-16 No fix listed CWE-264
Load more