Login Request a demo
SD
Product
SD-WAN
by Cisco · last CVE Sep 27, 2023
On CISA KEVExploited in the wild
27
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities27In the news3Timeline
Severity mix
Critical 3High 17Medium 7Low 0
Severity
All severities27Critical3High17Medium7Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add SD-WAN to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-20930
6.7
0%
Sep 30
Cisco SD-WAN Software Arbitrary File Corruption Vulnerability
Affected: before 20.6.2; 20.8; 20.9
CVE-2021-34726
6.7
0%
Sep 23
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the…
Affected: before 18.4.6; 19.2.0 before 19.2.3; 20.1 before 20.1.2; 20.3 before 20.3.1; 20.4 before 20.4.1; 20.5 before 20.5.1
CVE-2021-1589
6.5
1%
Sep 23
A vulnerability in the disaster recovery feature of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain unauthorized access to user credentials
Affected: 20.3 before 20.3.4; 20.4 before 20.4.2; 20.5 before 20.5.2; 20.6 before 20.6.1
CVE-2020-27128
6.5
61%
Nov 6
A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to write arbitrary files to an affected system
Affected: before 20.3.1
CVE-2020-3536
5.4
1%
Oct 8
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack…
Affected: through 20.1.2; 20.3.1
CVE-2022-20844
5.3
1%
Sep 30
Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability
Affected: 20.4.1 before 20.6.3; 20.3.4.1; 20.3.4.2; 20.3.5; 20.7.1
CVE-2021-1614
5.3
1%
Jul 22
A vulnerability in the Multiprotocol Label Switching (MPLS) packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to gain access to…
Affected: 18.4.0 before 18.4.6; 19.2.0 before 19.2.3; 20.3 before 20.3.2; 20.4 before 20.4.1; 20.5 before 20.5.1
Showing 7