Product:

Vmanage_network_management

(Cisco)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 13
Date Id Summary Products Score Patch Annotated
2018-07-18 CVE-2018-0344 A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient input validation of data parameters for certain fields in the affected solution. An attacker could exploit this vulnerability by configuring a malicious username on the login page of the affected... Vbond_orchestrator, Vedge\-1000_firmware, Vedge\-100_firmware, Vedge\-2000_firmware, Vedge\-5000_firmware, Vedge\-Plus, Vedge\-Pro, Vedge_100b_firmware, Vedge_100m_firmware, Vedge_100wm_firmware, Vmanage_network_management, Vsmart_controller 7.2
2018-07-18 CVE-2018-0343 A vulnerability in the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to execute arbitrary code with vmanage user privileges or cause a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient access restrictions to the HTTP management interface of the affected solution. An attacker could exploit this vulnerability by sending a malicious HTTP request to the affected management service... Vbond_orchestrator, Vedge\-1000_firmware, Vedge\-100_firmware, Vedge\-2000_firmware, Vedge\-5000_firmware, Vedge\-Plus, Vedge\-Pro, Vedge_100b_firmware, Vedge_100m_firmware, Vedge_100wm_firmware, Vmanage_network_management, Vsmart_controller 8.8
2018-07-18 CVE-2018-0342 A vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could allow an authenticated, local attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incomplete bounds checks for data that is provided by the configuration and monitoring service of the affected solution. An attacker could exploit this vulnerability by sending malicious data to the vDaemon listening... Vbond_orchestrator, Vedge\-1000_firmware, Vedge\-100_firmware, Vedge\-2000_firmware, Vedge\-5000_firmware, Vedge\-Plus, Vedge\-Pro, Vedge_100b_firmware, Vedge_100m_firmware, Vedge_100wm_firmware, Vmanage_network_management, Vsmart_controller 6.7