Cisco SD-WAN vManage vulnerabilities
8 known vulnerabilities in Cisco SD-WAN vManage from Cisco. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an…
A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only. This vulnerability does not prevent the system from continuing to fu
- 8.8 High severity
Cisco SD-WAN vManage: Incorrect Permission Assignment for Critical Resource
A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow an authenticated, remote attacker to access another tenant that is being managed by the same Cisco Catalyst SD-WAN Manager instance. This vul
- 9.8 Critical severity
Cisco SD-WAN vManage: Improper Authentication
A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticated, remote attacker to gain unauthorized access to the application as an arbitrary user. This vulnerability is due to im
- 7.5 High severity
Cisco SD-WAN vManage: Use of Hard-coded Credentials
Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to access the Elasticsearch configuration database of an affected device with the privileges of the elasticsearch user. The
- 9.1 Critical severity
Cisco SD-WAN vManage: Improper Authentication
A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to gain read permissions or limited write permissions to the configuration of an affected Cisco SD-WAN vM
- 8.1 High severity
Cisco SD-WAN vManage: Cross-Site Request Forgery
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF p
- 8.8 High severity
Cisco SD-WAN vManage: Improper Access Control
A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker who has access to the VPN0 logical network to also access the messaging service ports on an affected system. This vulnera
- 7.3 High severity
Cisco SD-WAN vManage: Improper Privilege Management
A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the root user. The attacker must be authenticated on the affected system as a low-privi