Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority LOW 39

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01446 Published 2021-01-20 No fix listed CWE-20
Priority LOW 39

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01446 Published 2021-01-20 No fix listed CWE-20
Priority LOW 37

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01364 Published 2021-01-20 No fix listed CWE-20
Priority LOW 39

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01459 Published 2021-01-20 No fix listed CWE-20
Priority MEDIUM 44

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02169 Published 2021-01-20 No fix listed CWE-20
Priority MEDIUM 44

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02169 Published 2021-01-20 No fix listed CWE-20