SF
Product
Sd-wan Firmware
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 26Medium 13Low 0
Watch
Add Sd-wan Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3437 | 6.5 | Jul 16 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying… Affected: before 19.2.3 |
| CVE-2020-3401 | 6.5 | Jul 16 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain… Affected: through 19.2.2 |
| CVE-2020-3385 | 6.5 | Jul 16 | A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS)… Affected: through 18.3.0; 18.4.0 before 18.4.5; 19.2.0 before 19.2.3; 19.3.0 before 20.1.1 |
| CVE-2020-3372 | 6.5 | Jul 16 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to consume excessive system memory and cause a… Affected: before 19.2.3; 20.1.0 before 20.1.12 |
| CVE-2019-12619 | 6.5 | Jan 26 | A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, remote attacker to impact the integrity of an affected system by executing… Affected: through 17.2.0 |
| CVE-2019-16002 | 6.5 | Nov 26 | A vulnerability in the vManage web-based UI (web UI) of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF)… Affected: before 19.2.0 |
| CVE-2019-1951 | 5.8 | Aug 8 | A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters Affected: through 19.1.0 |
| CVE-2020-3468 | 5.4 | Jul 16 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an… Affected: through 19.2.2 |
| CVE-2020-3406 | 5.4 | Jul 16 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 19.2.2 |
| CVE-2019-16010 | 4.8 | Mar 19 | A vulnerability in the web UI of the Cisco SD-WAN vManage software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of… Affected: before 19.2.2 |
| CVE-2021-1233 | 4.4 | Jan 20 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information on an affected device Affected: before 18.4.3 |
| CVE-2021-1305 | 4.3 | Jan 20 | Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify… Affected: before 20.3.2; 20.4.0 |
| CVE-2020-3378 | 4.3 | Jul 16 | A vulnerability in the web-based management interface for Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to impact the integrity of an affected system… Affected: before 18.4.5; 19.2.0 before 19.2.3 |
Showing 13