Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior
Críticas / altas1284▼ 85 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior
10 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.8) | 0.47% | — | Cisco Vbond OrchestratorCisco Vedge-plusCisco Vedge-proCisco Vmanage Network Management+8 | 18/7/2018 | 17/6/2026 | A vulnerability in the command-line tcpdump utility in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to… | |
| Modificada | Alta (8.8) | 3.0% | — | Cisco Vbond OrchestratorCisco Vedge-plusCisco Vedge-proCisco Vmanage Network Management+8 | 18/7/2018 | 17/6/2026 | A vulnerability in the VPN subsystem configuration in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to… | |
| Modificada | Crítica (9.8) | 3.0% | — | Cisco Vbond OrchestratorCisco Vedge-plusCisco Vedge-proCisco Vmanage Network Management+8 | 18/7/2018 | 17/6/2026 | A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the request admin-tech command in the CLI of the affected software. An attacker… | |
| Modificada | Alta (7.2) | 2.9% | — | Cisco Vbond OrchestratorCisco Vedge-plusCisco Vedge-proCisco Vmanage Network Management+8 | 18/7/2018 | 17/6/2026 | A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and… | |
| Modificada | Alta (7.8) | 0.47% | — | Cisco Vbond OrchestratorCisco Vedge-plusCisco Vedge-proCisco Vmanage Network Management+8 | 18/7/2018 | 17/6/2026 | A vulnerability in the Zero Touch Provisioning (ZTP) subsystem of the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by… | |
| Modificada | Alta (7.5) | 2.0% | — | Cisco Vbond OrchestratorCisco Vedge-plusCisco Vedge-proCisco Vmanage Network Management+8 | 18/7/2018 | 17/6/2026 | A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect bounds checks for certain values in packets that are sent to the Zero Touch… | |
| Modificada | Alta (8.8) | 3.0% | — | Cisco Vbond OrchestratorCisco Vedge-plusCisco Vedge-proCisco Vmanage Network Management+8 | 18/7/2018 | 17/6/2026 | A vulnerability in the configuration and management database of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to execute arbitrary commands with the privileges of the vmanage user in the configuration management system of the affected software. The vulnerability is due to insufficient… | |
| Modificada | Alta (7.2) | 2.0% | — | Cisco Vbond OrchestratorCisco Vedge-plusCisco Vedge-proCisco Vmanage Network Management+8 | 18/7/2018 | 17/6/2026 | A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient input validation of data… | |
| Modificada | Alta (8.8) | 1.9% | — | Cisco Vbond OrchestratorCisco Vedge-plusCisco Vedge-proCisco Vmanage Network Management+8 | 18/7/2018 | 17/6/2026 | A vulnerability in the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to execute arbitrary code with vmanage user privileges or cause a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient access restrictions… | |
| Modificada | Media (6.7) | 0.45% | — | Cisco Vbond OrchestratorCisco Vedge-plusCisco Vedge-proCisco Vmanage Network Management+8 | 18/7/2018 | 17/6/2026 | A vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could allow an authenticated, local attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incomplete bounds checks for data that is… |