sd-wan_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/sd-wan_firmware/ Sun, 26 Feb 2023 06:41:09 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png sd-wan_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/sd-wan_firmware/ 32 32 CVE-2020-3437 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3437/ Sun, 26 Feb 2023 06:41:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3437/ A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of the device. The vulnerability is due to insufficient file scope limiting. An attacker could exploit this vulnerability by creating a specific file reference on the filesystem and then […]

The post CVE-2020-3437 appeared first on CVE Vulnerability.

]]> A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of the device. The vulnerability is due to insufficient file scope limiting. An attacker could exploit this vulnerability by creating a specific file reference on the filesystem and then accessing it through the web-based management interface. A successful exploit could allow the attacker to read arbitrary files from the filesystem of the underlying operating system.

The post CVE-2020-3437 appeared first on CVE Vulnerability.

]]> CVE-2020-3401 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3401/ Sun, 26 Feb 2023 06:41:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3401/ A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain read access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP […]

The post CVE-2020-3401 appeared first on CVE Vulnerability.

]]> A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain read access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to the affected system. A successful exploit could allow the attacker to view arbitrary files on the affected system.

The post CVE-2020-3401 appeared first on CVE Vulnerability.

]]> CVE-2020-3388 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3388/ Sun, 26 Feb 2023 06:41:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3388/ A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI. The attacker must […]

The post CVE-2020-3388 appeared first on CVE Vulnerability.

]]> A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI. The attacker must be authenticated to access the CLI. A successful exploit could allow the attacker to execute commands with root privileges.

The post CVE-2020-3388 appeared first on CVE Vulnerability.

]]> CVE-2020-3387 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3387/ Sun, 26 Feb 2023 06:41:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3387/ A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to execute code with root privileges on an affected system. The vulnerability is due to insufficient input sanitization during user authentication processing. An attacker could exploit this vulnerability by sending a crafted response to the Cisco SD-WAN vManage Software. A successful exploit […]

The post CVE-2020-3387 appeared first on CVE Vulnerability.

]]> A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to execute code with root privileges on an affected system. The vulnerability is due to insufficient input sanitization during user authentication processing. An attacker could exploit this vulnerability by sending a crafted response to the Cisco SD-WAN vManage Software. A successful exploit could allow the attacker to access the software and execute commands they should not be authorized to execute.

The post CVE-2020-3387 appeared first on CVE Vulnerability.

]]> CVE-2020-3381 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3381/ Sun, 26 Feb 2023 06:41:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3381/ A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct directory traversal attacks and obtain read and write access to sensitive files on a targeted system. The vulnerability is due to a lack of proper validation of files that are uploaded to an affected device. […]

The post CVE-2020-3381 appeared first on CVE Vulnerability.

]]> A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct directory traversal attacks and obtain read and write access to sensitive files on a targeted system. The vulnerability is due to a lack of proper validation of files that are uploaded to an affected device. An attacker could exploit this vulnerability by uploading a crafted file to an affected system. An exploit could allow the attacker to view or modify arbitrary files on the targeted system.

The post CVE-2020-3381 appeared first on CVE Vulnerability.

]]> CVE-2020-3379 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3379/ Sun, 26 Feb 2023 06:41:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3379/ A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated, local attacker to elevate privileges to Administrator on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to gain […]

The post CVE-2020-3379 appeared first on CVE Vulnerability.

]]> A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated, local attacker to elevate privileges to Administrator on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to gain administrative privileges.

The post CVE-2020-3379 appeared first on CVE Vulnerability.

]]> CVE-2020-3378 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3378/ Sun, 26 Feb 2023 06:41:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3378/ A vulnerability in the web-based management interface for Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted input that includes SQL statements […]

The post CVE-2020-3378 appeared first on CVE Vulnerability.

]]> A vulnerability in the web-based management interface for Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted input that includes SQL statements to an affected system. A successful exploit could allow the attacker to modify entries in some database tables, affecting the integrity of the data.

The post CVE-2020-3378 appeared first on CVE Vulnerability.

]]> CVE-2020-3372 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3372/ Sun, 26 Feb 2023 06:41:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3372/ A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to consume excessive system memory and cause a denial of service (DoS) condition on an affected system. The vulnerability is due to inefficient memory management. An attacker could exploit this vulnerability by sending a large number of […]

The post CVE-2020-3372 appeared first on CVE Vulnerability.

]]> A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to consume excessive system memory and cause a denial of service (DoS) condition on an affected system. The vulnerability is due to inefficient memory management. An attacker could exploit this vulnerability by sending a large number of crafted HTTP requests to the affected web-based management interface. A successful exploit could allow the attacker to exhaust system memory, which could cause the system to stop processing new connections and could result in a DoS condition.

The post CVE-2020-3372 appeared first on CVE Vulnerability.

]]> CVE-2020-3266 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3266/ Sun, 26 Feb 2023 06:41:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3266/ A vulnerability in the CLI of Cisco SD-WAN Solution software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI utility. The attacker […]

The post CVE-2020-3266 appeared first on CVE Vulnerability.

]]> A vulnerability in the CLI of Cisco SD-WAN Solution software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI utility. The attacker must be authenticated to access the CLI utility. A successful exploit could allow the attacker to execute commands with root privileges.

The post CVE-2020-3266 appeared first on CVE Vulnerability.

]]> CVE-2020-3265 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3265/ Sun, 26 Feb 2023 06:41:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3265/ A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to gain […]

The post CVE-2020-3265 appeared first on CVE Vulnerability.

]]> A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to gain root-level privileges.

The post CVE-2020-3265 appeared first on CVE Vulnerability.

]]>