CVE-2018-0432

Cisco SD-WAN Solution Privilege Escalation Vulnerability

A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the error reporting application configuration. An attacker could exploit this vulnerability by sending a crafted command to the error reporting feature. A successful exploit could allow the attacker to gain root-level privileges and take full control of the device.

CVSS 3.0 · 8.8 High EPSS 2.6% KEV · Not listed

Vendors

Cisco

Products

Vedge 100 Vedge 1000 Vedge 1000 Firmware and 6 more

CVE-2018-0433

Cisco SD-WAN Solution Command Injection Vulnerability

A vulnerability in the command-line interface (CLI) in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI utility. The attacker must be authenticated to access the CLI utility. A successful exploit could allow the attacker to execute commands with root privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Cisco

Products

Vbond Orchestrator Vedge 100 Vedge 1000 and 9 more

CVE-2018-0434

Cisco SD-WAN Solution Certificate Validation Vulnerability

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected software. An attacker could exploit this vulnerability by supplying a crafted certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections to the affected software.

CVSS 3.0 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Cisco

Products

Vedge 100 Vedge 1000 Vedge 1000 Firmware and 6 more

CVE-2022-20930

Cisco SD-WAN Software Arbitrary File Corruption Vulnerability

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on an affected system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting arbitrary commands that are executed as the root user account. A successful exploit could allow the attacker to overwrite arbitrary system files, which could result in a denial of service (DoS) condition.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Cisco

Products

Catalyst Sd-wan Manager Sd-wan Sd-wan Vbond Orchestrator and 9 more

CVE-2022-20850

Cisco SD-WAN Arbitrary File Deletion Vulnerability

A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting arbitrary file path information when using commands in the CLI of an affected device. A successful exploit could allow the attacker to delete arbitrary files from the file system of the affected device.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Cisco

Products

1100-4g Integrated Services Router 1100-6g Integrated Services Router 1100 Integrated Services Router and 11 more

CVE-2021-1546

Cisco SD-WAN Software Information Disclosure Vulnerability

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information. This vulnerability is due to improper protections on file access through the CLI. An attacker could exploit this vulnerability by running a CLI command that targets an arbitrary file on the local system. A successful exploit could allow the attacker to return portions of an arbitrary file, possibly resulting in the disclosure of sensitive information.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Cisco

Products

Catalyst Sd-wan Manager Sd-wan Vbond Orchestrator Sd-wan Vmanage and 18 more

CVE-2021-1528

Cisco SD-WAN Software Privilege Escalation Vulnerability

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected system. This vulnerability exists because the affected software does not properly restrict access to privileged processes. An attacker could exploit this vulnerability by invoking a privileged process in the affected system. A successful exploit could allow the attacker to perform actions with the privileges of the root user.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Cisco

Products

Catalyst Sd-wan Manager Sd-wan Vbond Orchestrator Vedge 100 and 16 more

CVE-2021-1514

Cisco SD-WAN Software Privilege Escalation Vulnerability

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with Administrator privileges on the underlying operating system. This vulnerability is due to insufficient input validation on certain CLI commands. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI. The attacker must be authenticated as a low-privileged user to execute the affected commands. A successful exploit could allow the attacker to execute commands with Administrator privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Cisco

Products

Catalyst Sd-wan Manager Sd-wan Vbond Orchestrator Sd-wan Vmanage and 20 more

CVE-2021-1513

Cisco SD-WAN Software vDaemon Denial of Service Vulnerability

A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient handling of malformed packets. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed

Vendors

Cisco

Products

Catalyst Sd-wan Manager Sd-wan Vbond Orchestrator Vedge-100b and 19 more

CVE-2021-1512

Cisco SD-WAN Software Arbitrary File Corruption Vulnerability

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system. This vulnerability is due to insufficient validation of the user-supplied input parameters of a specific CLI command. An attacker could exploit this vulnerability by issuing that command with specific parameters. A successful exploit could allow the attacker to overwrite the content in any arbitrary files that reside on the underlying host file system.

CVSS 3.1 · 6.0 Medium EPSS < 1% KEV · Not listed

Vendors

Cisco

Products

Catalyst Sd-wan Manager Sd-wan Vbond Orchestrator Sd-wan Vmanage and 20 more

CVE-2021-1511

Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 7.5 High EPSS 1.0% KEV · Not listed

Vendors

Cisco

Products

Vedge 100 Vedge 1000 Vedge 1000 Firmware and 13 more

CVE-2021-1510

Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed

Vendors

Cisco

Products

Vedge 100 Vedge 1000 Vedge 1000 Firmware and 13 more

CVE-2021-1509

Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed

Vendors

Cisco

Products

Vedge 100 Vedge 1000 Vedge 1000 Firmware and 13 more

CVE-2021-1305

Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not authorized to access. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed

Vendors

Cisco

Products

Ios Xe Sd-wan Sd-wan Firmware Sd-wan Vbond Orchestrator and 9 more

CVE-2021-1301

Cisco SD-WAN Buffer Overflow Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 9.8 Critical EPSS 2.1% KEV · Not listed

Vendors

Cisco

Products

Catalyst Sd-wan Manager Ios Xe Sd-wan Sd-wan Firmware and 10 more

CVE-2021-1300

Cisco SD-WAN Buffer Overflow Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 9.8 Critical EPSS 2.2% KEV · Not listed

Vendors

Cisco

Products

Catalyst Sd-wan Manager Ios Xe Sd-wan Sd-wan Firmware and 10 more

CVE-2021-1299

Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.8 High EPSS 2.2% KEV · Not listed

Vendors

Cisco

Products

Catalyst Sd-wan Manager Sd-wan Firmware Sd-wan Vbond Orchestrator and 9 more

CVE-2021-1298

Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.8 High EPSS 2.2% KEV · Not listed

Vendors

Cisco

Products

Catalyst Sd-wan Manager Sd-wan Firmware Sd-wan Vbond Orchestrator and 9 more

CVE-2021-1279

Cisco SD-WAN Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 1.4% KEV · Not listed

Vendors

Cisco

Products

Catalyst Sd-wan Manager Ios Xe Sd-wan Sd-wan Firmware and 10 more

CVE-2021-1278

Cisco SD-WAN Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 1.7% KEV · Not listed

Vendors

Cisco

Products

Catalyst Sd-wan Manager Ios Xe Sd-wan Sd-wan Firmware and 10 more