Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

14 records

Priority LOW 24

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00232 Published 2021-09-23 No fix listed CWE-209
Priority LOW 36

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00248 Published 2021-06-04 No fix listed CWE-250
Priority LOW 34

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with Administrator privileges on the underlying operating system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00325 Published 2021-05-06 No fix listed CWE-20
Priority MEDIUM 42

A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting in a denial of service (DoS) condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01519 Published 2021-05-06 No fix listed CWE-20
Priority LOW 26

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00229 Published 2021-05-06 No fix listed CWE-552
Priority LOW 37

Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01024 Published 2021-05-06 No fix listed CWE-119
Priority LOW 37

Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0122 Published 2021-05-06 No fix listed CWE-119
Priority LOW 37

Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01216 Published 2021-05-06 No fix listed CWE-119
Priority MEDIUM 46

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03475 Published 2019-01-24 No fix listed CWE-20
Priority LOW 36

A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local attacker to gain elevated privileges on an affected device.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00372 Published 2019-01-24 No fix listed CWE-264
Priority LOW 36

A vulnerability in the local CLI of the Cisco SD-WAN Solution could allow an authenticated, local attacker to escalate privileges and modify device configuration files.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00446 Published 2019-01-24 No fix listed CWE-264
Priority LOW 36

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate.

CVSS 3.0HIGH 7.4 Network No auth No interaction EPSS 0.00832 Published 2018-10-05 No fix listed CWE-295
Priority LOW 36

A vulnerability in the command-line interface (CLI) in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0045 Published 2018-10-05 No fix listed CWE-77
Priority MEDIUM 45

A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02633 Published 2018-10-05 No fix listed CWE-264