Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 27

Export CSV
CVE-2021-1273

Cisco SD-WAN Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 1.9% KEV · Not listed
Vendors
Cisco
Products
Catalyst Sd-wan Manager Ios Xe Sd-wan Sd-wan Firmware and 10 more
CVE-2021-1263

Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 7.8 High EPSS 1.5% KEV · Not listed
Vendors
Cisco
Products
Catalyst Sd-wan Manager Sd-wan Firmware Sd-wan Vbond Orchestrator and 9 more
CVE-2021-1262

Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Cisco
Products
Catalyst Sd-wan Manager Sd-wan Firmware Sd-wan Vbond Orchestrator and 9 more
CVE-2021-1261

Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Cisco
Products
Catalyst Sd-wan Manager Sd-wan Firmware Sd-wan Vbond Orchestrator and 9 more
CVE-2021-1260

Cisco SD-WAN Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Cisco
Products
Catalyst Sd-wan Manager Sd-wan Firmware Sd-wan Vbond Orchestrator and 9 more
CVE-2021-1241

Cisco SD-WAN Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 1.4% KEV · Not listed
Vendors
Cisco
Products
Catalyst Sd-wan Manager Ios Xe Sd-wan Sd-wan Firmware and 10 more
CVE-2021-1233

Cisco SD-WAN Information Disclosure Vulnerability

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information on an affected device. The vulnerability is due to insufficient input validation of requests that are sent to the iperf tool. An attacker could exploit this vulnerability by sending a crafted request to the iperf tool, which is included in Cisco SD-WAN Software. A successful exploit could allow the attacker to obtain any file from the filesystem of an affected device.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cisco
Products
Catalyst Sd-wan Manager Sd-wan Firmware Sd-wan Vbond Orchestrator and 8 more