SD
Product
SD-WAN
On CISA KEVExploited in the wild
27
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 3High 17Medium 7Low 0
Watch
Add SD-WAN to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-20775 In wildKEV | 7.8 | Sep 30 | Cisco SD-WAN Software Privilege Escalation Vulnerability Affected: before 20.6.3; 20.7 before 20.7.2; 20.8 |
| CVE-2019-1624 | 8.8 | Jun 20 | A vulnerability in the vManage web-based UI (Web UI) in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with… Affected: before 18.4.0 |
| CVE-2019-1650 | 8.8 | Jan 24 | Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability Affected: before 18.4.0 |
| CVE-2023-20113 | 8.1 | Mar 23 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery… Affected: before 20.6.5; 20.8.0; 20.9.0 |
| CVE-2019-1647 | 8.0 | Jan 24 | Cisco SD-WAN Solution Unauthorized Access Vulnerability Affected: before 18.4.0 |
| CVE-2022-20818 | 7.8 | Sep 30 | Cisco SD-WAN Software Privilege Escalation Vulnerabilities Affected: before 20.9 |
| CVE-2022-20716 | 7.8 | Apr 15 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges Affected: 18.4 before 20.6.1; 20.7 before 20.7.1 |
| CVE-2020-3600 | 7.8 | Nov 6 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system Affected: before 20.1.2; 20.3 before 20.3.2 |
| CVE-2020-3595 | 7.8 | Nov 6 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root group on the underlying operating system Affected: before 20.1.2; 20.3 before 20.3.2 |
| CVE-2020-3594 | 7.8 | Nov 6 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system Affected: before 20.1.2; 20.3 before 20.3.2 |
| CVE-2020-3593 | 7.8 | Nov 6 | A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system Affected: before 20.1.2; 20.3 before 20.3.1 |
| CVE-2020-3180 | 7.8 | Jul 16 | A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected device by using an account that has a default, static… Affected: 18.3.0 before 18.3.6; 18.4.0 before 18.4.5; 19.2.0 before 19.2.2 |
| CVE-2019-1648 | 7.8 | Jan 24 | Cisco SD-WAN Solution Privilege Escalation Vulnerability Affected: before 18.4.0 |
| CVE-2019-1646 | 7.8 | Jan 24 | Privilege Escalation Vulnerability in Cisco SD-WAN Solution Affected: before 18.4.0 |
| CVE-2023-20034 | 7.5 | Sep 27 | Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to access the Elasticsearch configuration… Affected: 20.3 before 20.3.4; 20.6; 20.7 |
| CVE-2022-20850 | 7.1 | Sep 30 | Cisco SD-WAN Arbitrary File Deletion Vulnerability Affected: before 18.4.5 |
| CVE-2021-1612 | 7.1 | Sep 23 | A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to overwrite arbitrary files on the local system Affected: before 17.3.4 |
Showing 17