Sd-wan vulnerabilities

6 known vulnerabilities in Sd-wan from Cisco. 6 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Cisco SD-WAN vManage: Use of Hard-coded Credentials

  CVE-2023-20034Sep 27, 2023Cisco

  Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to access the Elasticsearch configuration database of an affected device with the privileges of the elasticsearch user. The

• 8.1 High severity

  Cisco SD-WAN vManage: Cross-Site Request Forgery

  CVE-2023-20113Mar 23, 2023Cisco

  A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF p

• 7.1 High severity

  A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN…

  CVE-2022-20850Sep 30, 2022Cisco

  A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device. This vulnerability is due to insufficient input

• 7.8 High severity

  Cisco SD-WAN Solution: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-20818Sep 30, 2022Cisco

  Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit t

• 7.8 High severity

  Cisco SD-WAN Path Traversal Exploited

  CVE-2022-20775Sep 30, 2022CiscoEPSS 12%

  A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerabi

• 7.8 High severity

  Cisco SD-WAN Solution: Improper Access Control

  CVE-2022-20716Apr 15, 2022Cisco

  A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnera