Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2020-07-31	CVE-2020-3374	Incorrect Authorization vulnerability in Cisco Sd-Wan A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization, enabling them to access sensitive information, modify the system configuration, or impact the availability of the affected system. network low complexity cisco CWE-863 critical	9.9
2020-07-31	CVE-2020-3375	Improper Input Validation vulnerability in Cisco IOS XE Sd-Wan and Sd-Wan A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. network low complexity cisco CWE-20 critical	9.8
2018-10-05	CVE-2018-15387	Improper Certificate Validation vulnerability in Cisco Sd-Wan A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. network low complexity cisco CWE-295 critical	9.8