Skip to content
OpenAdvisories

Archive

24 January 2019

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • High 8.6

    Cisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerability

    A vulnerability in the data acquisition (DAQ) component of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access control policies or cause a denial of service (DoS) condition. The vulnerabili…

  • High 7.2
    CVE-2019-1652 Exploited Public exploit EPSS 96%

    Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vu…

    KEV Mar 3, 2022
  • High 7.5
    CVE-2019-1653 Exploited Public exploit Scanner template EPSS 100%

    Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls …

    KEV Nov 3, 2021
  • High 7.8

    Cisco SD-WAN Solution Privilege Escalation Vulnerability

    A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included…

  • High 7.8

    Privilege Escalation Vulnerability in Cisco SD-WAN Solution

    A vulnerability in the local CLI of the Cisco SD-WAN Solution could allow an authenticated, local attacker to escalate privileges and modify device configuration files. The vulnerability exists because user input is not properly sanitized for certain commands…

  • High 8.0

    Cisco SD-WAN Solution Unauthorized Access Vulnerability

    A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, adjacent attacker to bypass authentication and have direct unauthorized access to other vSmart containers. The vulnerability is due to an insecure default configuration of the affected…

  • High 8.8

    Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability

    A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the save command in the …