VendorsCiscosd-wanall versions
Vulnerabilities

Cisco SD-WAN

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

27CVEs
CVE-2020-3375
Cisco SD-WAN Solution Software Buffer Overflow Vulnerability
Published 2020-07-31 · Modified
10.0EPSS 0.039
CVE-2020-3374
Cisco SD-WAN vManage Software Authorization Bypass Vulnerability
Published 2020-07-31 · Modified
9.9EPSS 0.019
CVE-2018-15387
Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability
Published 2018-10-05 · Modified
9.8EPSS 0.011
CVE-2019-1624
Cisco SD-WAN Solution Command Injection Vulnerability
Published 2019-06-20 · Modified
9.0EPSS 0.043
CVE-2019-1650
Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability
Published 2019-01-24 · Modified
9.0EPSS 0.035
CVE-2020-3180
Cisco SD-WAN Solution Software Static Credentials Vulnerability
Published 2020-07-16 · Modified
8.4EPSS 0.003
CVE-2023-20113
Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability
Published 2023-03-23 · Modified
8.1EPSS 0.003
CVE-2019-1647
Cisco SD-WAN Solution Unauthorized Access Vulnerability
Published 2019-01-24 · Modified
8.0EPSS 0.008
CVE-2022-20775
Cisco SD-WAN Software Privilege Escalation Vulnerability
Published 2022-09-30 · Analyzed
7.8KEVEPSS 0.125
CVE-2022-20818
Cisco SD-WAN Software Privilege Escalation Vulnerabilities
Published 2022-09-30 · Modified
7.8EPSS 0.006
CVE-2019-1646
Privilege Escalation Vulnerability in Cisco SD-WAN Solution
Published 2019-01-24 · Modified
7.8EPSS 0.004
CVE-2019-1648
Cisco SD-WAN Solution Privilege Escalation Vulnerability
Published 2019-01-24 · Modified
7.8EPSS 0.004
CVE-2020-3594
Cisco SD-WAN Software Privilege Escalation Vulnerability
Published 2020-11-06 · Modified
7.8EPSS 0.003
CVE-2020-3595
Cisco SD-WAN Software Privilege Escalation Vulnerability
Published 2020-11-06 · Modified
7.8EPSS 0.003
CVE-2020-3600
Cisco SD-WAN Software Privilege Escalation Vulnerability
Published 2020-11-06 · Modified
7.8EPSS 0.003
CVE-2020-3593
Cisco SD-WAN Software Privilege Escalation Vulnerability
Published 2020-11-06 · Modified
7.8EPSS 0.003
CVE-2022-20716
Cisco SD-WAN Solution Improper Access Control Vulnerability
Published 2022-04-15 · Modified
7.8EPSS 0.002
CVE-2023-20034
Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to access the Elasticsearch configuration database of an affected device with the privileges of the elasticsearch user. These vulnerability is due to the presence of a static username and password configured on the vManage. An attacker could exploit this vulnerability by sending a crafted HTTP request to a reachable vManage on port 9200. A successful exploit could allow the attacker to view the Elasticsearch database content. There are workarounds that address this vulnerability.
Published 2023-09-27 · Modified
7.5EPSS 0.006
CVE-2021-34726
Cisco SD-WAN Software Command Injection Vulnerability
Published 2021-09-23 · Modified
7.2EPSS 0.004
CVE-2021-1612
Cisco IOS XE SD-WAN Software Arbitrary File Overwrite Vulnerability
Published 2021-09-23 · Modified
7.1EPSS 0.003
CVE-2022-20850
Cisco SD-WAN Arbitrary File Deletion Vulnerability
Published 2022-09-30 · Modified
7.1EPSS 0.002
CVE-2022-20930
Cisco SD-WAN Software Arbitrary File Corruption Vulnerability
Published 2022-09-30 · Modified
6.7EPSS 0.002
CVE-2020-27128
Cisco SD-WAN vManage Software Arbitrary File Creation Vulnerability
Published 2020-11-06 · Modified
6.5EPSS 0.608
CVE-2021-1589
Cisco SD-WAN vManage Software Disaster Recovery Feature Password Exposure Vulnerability
Published 2021-09-23 · Modified
6.5EPSS 0.010
CVE-2020-3536
Cisco SD-WAN vManage Cross-Site Scripting Vulnerability
Published 2020-10-08 · Modified
6.4EPSS 0.006
CVE-2021-1614
Cisco SD-WAN Software Information Disclosure Vulnerability
Published 2021-07-22 · Modified
5.3EPSS 0.012
CVE-2022-20844
Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability
Published 2022-09-30 · Modified
5.3EPSS 0.008