Cisco Sd-Wan Firmware vulnerabilities

CVE-2020-3369 [HIGH] CWE-118 CVE-2020-3369: A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper processing of FTP traffic. An attacker could exploit this vulnerability by sending crafted FTP packets through an

CVE-2020-3388 [HIGH] CWE-287 CVE-2020-3388: A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local atta A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI. The

CVE-2020-3372 [MEDIUM] CWE-400 CVE-2020-3372: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow a A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to consume excessive system memory and cause a denial of service (DoS) condition on an affected system. The vulnerability is due to inefficient memory management. An attacker could exploit this vulnerability by sending a

CVE-2020-3385 [MEDIUM] CWE-371 CVE-2020-3385: A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient handling of malformed packets. An attacker could exploit this vulnerability by sending crafted packets th

CVE-2020-3401 [MEDIUM] CWE-22 CVE-2020-3401: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow a A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain read access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by send

CVE-2020-3406 [MEDIUM] CWE-79 CVE-2020-3406: A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could all A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exp

CVE-2020-3378 [MEDIUM] CWE-89 CVE-2020-3378: A vulnerability in the web-based management interface for Cisco SD-WAN vManage Software could allow A vulnerability in the web-based management interface for Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted

CVE-2020-3437 [MEDIUM] CWE-59 CVE-2020-3437: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow a A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of the device. The vulnerability is due to insufficient file scope limiting. An attacker could exploit this vulnerability by creating a specific file reference on the f

CVE-2020-3468 [MEDIUM] CWE-89 CVE-2020-3468: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow a A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates values within SQL queries. An attacker could exploit this vulnerability by a

CVE-2020-3266 [HIGH] CWE-77 CVE-2020-3266: A vulnerability in the CLI of Cisco SD-WAN Solution software could allow an authenticated, local att A vulnerability in the CLI of Cisco SD-WAN Solution software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI utili

CVE-2019-16012 [HIGH] CWE-77 CVE-2019-16012: A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web UI improperly validates SQL values. An attacker could exploit this vulnerability by authenticating to the application and sending malicious

CVE-2020-3265 [HIGH] CWE-264 CVE-2020-3265: A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to el A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the a

CVE-2020-3264 [HIGH] CWE-119 CVE-2020-3264: A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to ca A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain ac

CVE-2019-16010 [MEDIUM] CWE-79 CVE-2019-16010: A vulnerability in the web UI of the Cisco SD-WAN vManage software could allow an authenticated, rem A vulnerability in the web UI of the Cisco SD-WAN vManage software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the vManage software. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface.

CVE-2020-3115 [HIGH] CWE-264 CVE-2020-3115: A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticate A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to elevate privileges to root-level privileges on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted file to the affected system.

CVE-2019-12629 [HIGH] CWE-77 CVE-2019-12629: A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attac A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient input validation of data parameters for certain fields in the affected solution. An attacker could exploit this vuln

CVE-2019-12619 [MEDIUM] CWE-89 CVE-2019-12619: A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted input that in

CVE-2019-16002 [MEDIUM] CWE-352 CVE-2019-16002: A vulnerability in the vManage web-based UI (web UI) of the Cisco SD-WAN Solution could allow an una A vulnerability in the vManage web-based UI (web UI) of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected instance of vManage. An attacker could exploit this vuln

CVE-2019-1951 [MEDIUM] CWE-20 CVE-2019-1951: A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthentic A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by crafting a malicious TCP packet with specific characterist

CVE-2019-1625 [HIGH] CWE-264 CVE-2019-1625: A vulnerability in the CLI of Cisco SD-WAN Solution could allow an authenticated, local attacker to A vulnerability in the CLI of Cisco SD-WAN Solution could allow an authenticated, local attacker to elevate lower-level privileges to the root user on an affected device. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by authenticating to the targeted device and executing commands that cou