Vulnerabilities > Cisco > SD WAN

DATE CVE VULNERABILITY TITLE RISK
2020-07-16 CVE-2020-3180 Insufficiently Protected Credentials vulnerability in Cisco Sd-Wan
A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected device by using an account that has a default, static password.
local
low complexity
cisco CWE-522
7.8
2019-06-20 CVE-2019-1624 Command Injection vulnerability in Cisco Sd-Wan
A vulnerability in the vManage web-based UI (Web UI) in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges.
network
low complexity
cisco CWE-77
critical
9.0
2019-01-24 CVE-2019-1650 Improper Input Validation vulnerability in Cisco products
A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device.
network
low complexity
cisco CWE-20
critical
9.0
2019-01-24 CVE-2019-1648 Permissions, Privileges, and Access Controls vulnerability in Cisco products
A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local attacker to gain elevated privileges on an affected device.
local
low complexity
cisco CWE-264
7.2
2019-01-24 CVE-2019-1647 Improper Access Control vulnerability in Cisco Sd-Wan and Vsmart Controller
A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, adjacent attacker to bypass authentication and have direct unauthorized access to other vSmart containers.
low complexity
cisco CWE-284
7.7
2019-01-24 CVE-2019-1646 Permissions, Privileges, and Access Controls vulnerability in Cisco products
A vulnerability in the local CLI of the Cisco SD-WAN Solution could allow an authenticated, local attacker to escalate privileges and modify device configuration files.
local
low complexity
cisco CWE-264
7.2
2018-10-05 CVE-2018-15387 Improper Certificate Validation vulnerability in Cisco Sd-Wan
A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device.
network
low complexity
cisco CWE-295
7.5