SD
Product
SD-WAN
On CISA KEVExploited in the wild
27
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 3High 17Medium 7Low 0
Watch
Add SD-WAN to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-20775 In wildKEV | 7.8 | Sep 30 | Cisco SD-WAN Software Privilege Escalation Vulnerability Affected: before 20.6.3; 20.7 before 20.7.2; 20.8 |
| CVE-2020-3374 | 9.9 | Jul 31 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization, enabling them to… Affected: through 18.3.0; 18.4.0 before 18.4.5; 19.2.0 before 19.2.2; 19.3.0 before 20.1.1 |
| CVE-2020-3375 | 9.8 | Jul 31 | A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device Affected: through 18.3.0; 18.4.0 before 18.4.5; 19.2.0 before 19.2.2; 19.3.0 before 20.1.1 |
| CVE-2018-15387 | 9.8 | Oct 5 | A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device Affected: 17.2.0 before 17.2.8; 18.3.0 |
| CVE-2019-1624 | 8.8 | Jun 20 | A vulnerability in the vManage web-based UI (Web UI) in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with… Affected: before 18.4.0 |
| CVE-2019-1650 | 8.8 | Jan 24 | Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability Affected: before 18.4.0 |
| CVE-2023-20113 | 8.1 | Mar 23 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery… Affected: before 20.6.5; 20.8.0; 20.9.0 |
| CVE-2019-1647 | 8.0 | Jan 24 | Cisco SD-WAN Solution Unauthorized Access Vulnerability Affected: before 18.4.0 |
| CVE-2022-20818 | 7.8 | Sep 30 | Cisco SD-WAN Software Privilege Escalation Vulnerabilities Affected: before 20.9 |
| CVE-2022-20716 | 7.8 | Apr 15 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges Affected: 18.4 before 20.6.1; 20.7 before 20.7.1 |
| CVE-2020-3600 | 7.8 | Nov 6 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system Affected: before 20.1.2; 20.3 before 20.3.2 |
| CVE-2020-3595 | 7.8 | Nov 6 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root group on the underlying operating system Affected: before 20.1.2; 20.3 before 20.3.2 |
| CVE-2020-3594 | 7.8 | Nov 6 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system Affected: before 20.1.2; 20.3 before 20.3.2 |
| CVE-2020-3593 | 7.8 | Nov 6 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system Affected: before 20.1.2; 20.3 before 20.3.1 |
| CVE-2020-3180 | 7.8 | Jul 16 | A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected device by using an account that has a default, static… Affected: 18.3.0 before 18.3.6; 18.4.0 before 18.4.5; 19.2.0 before 19.2.2 |
| CVE-2019-1648 | 7.8 | Jan 24 | Cisco SD-WAN Solution Privilege Escalation Vulnerability Affected: before 18.4.0 |
| CVE-2019-1646 | 7.8 | Jan 24 | Privilege Escalation Vulnerability in Cisco SD-WAN Solution Affected: before 18.4.0 |
| CVE-2023-20034 | 7.5 | Sep 27 | Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to access the Elasticsearch configuration… Affected: 20.3 before 20.3.4; 20.6; 20.7 |
| CVE-2022-20850 | 7.1 | Sep 30 | Cisco SD-WAN Arbitrary File Deletion Vulnerability Affected: before 18.4.5 |
| CVE-2021-1612 | 7.1 | Sep 23 | A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to overwrite arbitrary files on the local system Affected: before 17.3.4 |
| CVE-2022-20930 | 6.7 | Sep 30 | Cisco SD-WAN Software Arbitrary File Corruption Vulnerability Affected: before 20.6.2; 20.8; 20.9 |
| CVE-2021-34726 | 6.7 | Sep 23 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the… Affected: before 18.4.6; 19.2.0 before 19.2.3; 20.1 before 20.1.2; 20.3 before 20.3.1; 20.4 before 20.4.1; 20.5 before 20.5.1 |
| CVE-2021-1589 | 6.5 | Sep 23 | A vulnerability in the disaster recovery feature of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain unauthorized access to user credentials Affected: 20.3 before 20.3.4; 20.4 before 20.4.2; 20.5 before 20.5.2; 20.6 before 20.6.1 |
| CVE-2020-27128 | 6.5 | Nov 6 | A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to write arbitrary files to an affected system Affected: before 20.3.1 |
| CVE-2020-3536 | 5.4 | Oct 8 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: through 20.1.2; 20.3.1 |
| CVE-2022-20844 | 5.3 | Sep 30 | Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability Affected: 20.4.1 before 20.6.3; 20.3.4.1; 20.3.4.2; 20.3.5; 20.7.1 |
| CVE-2021-1614 | 5.3 | Jul 22 | A vulnerability in the Multiprotocol Label Switching (MPLS) packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to gain access to… Affected: 18.4.0 before 18.4.6; 19.2.0 before 19.2.3; 20.3 before 20.3.2; 20.4 before 20.4.1; 20.5 before 20.5.1 |
Showing 27