Cisco Catalyst SD-WAN Manager any version

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Cisco SD-WAN vManage Software Vulnerabilities

Cisco SD-WAN Buffer Overflow Vulnerabilities

Cisco SD-WAN Buffer Overflow Vulnerabilities

Cisco SD-WAN vManage Software Vulnerabilities

Cisco SD-WAN vManage Software Vulnerabilities

Cisco SD-WAN vManage Software Vulnerabilities

Cisco SD-WAN vManage Software Vulnerabilities

Cisco SD-WAN vManage Software Vulnerabilities

Cisco Catayst SD-WAN Authentication Bypass Vulnerability

A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to gain read permissions or limited write permissions to the configuration of an affected Cisco SD-WAN vManage instance. This vulnerability is due to insufficient request validation when using the REST API feature. An attacker could exploit this vulnerability by sending a crafted API request to an affected vManage instance. A successful exploit could allow the attacker to retrieve information from and send information to the configuration of the affected Cisco vManage instance. This vulnerability only affects the REST API and does not affect the web-based management interface or the CLI.

Cisco SD-WAN Command Injection Vulnerabilities

Cisco SD-WAN Command Injection Vulnerabilities

Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

Cisco SD-WAN vManage Software Authentication Bypass Vulnerability

Cisco SD-WAN vManage Software Unauthenticated Access to Messaging Services Vulnerability

Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability

Cisco SD-WAN Denial of Service Vulnerabilities

Cisco SD-WAN Denial of Service Vulnerabilities

Cisco SD-WAN Denial of Service Vulnerabilities

Cisco SD-WAN Denial of Service Vulnerabilities

Cisco SD-WAN Denial of Service Vulnerabilities

Cisco Catalyst SD-WAN Manager XML External Entity Injection Vulnerability

Cisco SD-WAN Command Injection Vulnerabilities

Cisco SD-WAN Command Injection Vulnerabilities

Cisco SD-WAN Command Injection Vulnerabilities

Cisco SD-WAN Command Injection Vulnerabilities

Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability

Cisco SD-WAN Software Privilege Escalation Vulnerability

Cisco SD-WAN vManage Software Vulnerabilities

Cisco SD-WAN Software vDaemon Denial of Service Vulnerability

Cisco SD-WAN vManage Software Vulnerabilities

Cisco SD-WAN Software Privilege Escalation Vulnerability

Cisco SD-WAN Software Privilege Escalation Vulnerability

Cisco SD-WAN Solution Improper Access Control Vulnerability

A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.

Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only. This vulnerability does not prevent the system from continuing to function, and web UI access is not affected. This vulnerability is due to insufficient resource management when an affected system is in an error condition. An attacker could exploit this vulnerability by sending malicious traffic to the affected system. A successful exploit could allow the attacker to cause the SSH process to crash and restart, resulting in a DoS condition for the SSH service.