4 reportsPriority Medium
Cisco SD-WAN and IOS vulnerabilities
Multiple vulnerabilities have been identified in Cisco's SD-WAN and IOS systems, potentially allowing attackers to execute code, gain elevated privileges, and access sensitive information.
First report Latest
What is going on
- Cisco has identified a stack-based buffer overflow vulnerability in IOS and IOS XE software that could lead to denial of service or remote code execution.
- A path traversal vulnerability in Cisco SD-WAN CLI could allow authenticated local attackers to gain elevated privileges through improper access controls.
- A vulnerability in Cisco Catalyst SD-WAN Manager allows remote attackers to view sensitive information on affected systems.
- Another vulnerability in Cisco Catalyst SD-WAN Manager involves the incorrect use of privileged APIs, with reports of exploitation in the wild.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority MediumType VulnerabilityLead report
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
- Priority MediumType Vulnerability
Cisco SD-WAN Path Traversal Vulnerability
- Priority MediumType Vulnerability
Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
- Priority MediumType Vulnerability
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

