Sd-wan Vmanage vulnerabilities

6 known vulnerabilities in Sd-wan Vmanage from Cisco. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an…

  CVE-2023-20262Sep 27, 2023CiscoEPSS 1%

  A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only. This vulnerability does not prevent the system from continuing to fu

• 9.1 Critical severity

  Cisco SD-WAN vManage: Improper Authentication

  CVE-2023-20214Aug 3, 2023Cisco

  A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to gain read permissions or limited write permissions to the configuration of an affected Cisco SD-WAN vM

• 7.1 High severity

  A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN…

  CVE-2022-20850Sep 30, 2022Cisco

  A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device. This vulnerability is due to insufficient input

• 7.8 High severity

  Cisco SD-WAN Solution: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-20818Sep 30, 2022Cisco

  Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit t

• 8.8 High severity

  Cisco SD-WAN vManage: Improper Access Control

  CVE-2022-20696Sep 8, 2022Cisco

  A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker who has access to the VPN0 logical network to also access the messaging service ports on an affected system. This vulnera

• 7.3 High severity

  Cisco SD-WAN vManage: Improper Privilege Management

  CVE-2022-20739Apr 15, 2022Cisco

  A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the root user. The attacker must be authenticated on the affected system as a low-privi