Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2021-01-20	CVE-2021-1300	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco products Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. network low complexity cisco CWE-119 critical	9.8
2021-01-20	CVE-2021-1301	Improper Input Validation vulnerability in Cisco products Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. network low complexity cisco CWE-20 critical	9.8
2020-01-26	CVE-2019-12629	Injection vulnerability in Cisco Sd-Wan Firmware A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. network low complexity cisco CWE-74 critical	9.0