16.9

DATE	CVE	VULNERABILITY TITLE	RISK
2021-05-06	CVE-2021-1514	OS Command Injection vulnerability in Cisco products A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with Administrator privileges on the underlying operating system. local low complexity cisco CWE-78	7.8
2018-10-05	CVE-2018-0434	Improper Certificate Validation vulnerability in Cisco products A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. network cisco CWE-295	5.8
2018-10-05	CVE-2018-0433	OS Command Injection vulnerability in Cisco products A vulnerability in the command-line interface (CLI) in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. local low complexity cisco CWE-78	7.2
2018-10-05	CVE-2018-0432	OS Command Injection vulnerability in Cisco products A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device. network low complexity cisco CWE-78 critical	9.0