Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-1272	Cisco Systems, Inc. Data Center Network Manager	Hig	0.57	8.8	0.01	Jan 20, 2021	A vulnerability in the session validation feature of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. This vulnerability is due to…
CVE-2021-1257	Cisco Systems, Inc. Dna Center	Hig	0.57	8.8	0.01	Jan 20, 2021	A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to manipulate an authenticated user into executing malicious actions without their awareness…
CVE-2021-1144	Cisco Systems, Inc. Connected Mobile Experiences (CMX)	Hig	0.57	8.8	0.01	Jan 13, 2021	A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system. The vulnerability is due to incorrect handling of authorization checks for changing…
CVE-2020-26075	Cisco Systems, Inc. IoT Field Network Director	Hig	0.57	8.8	0.02	Nov 18, 2020	A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to gain access to the back-end database of an affected device. The vulnerability is due to insufficient input validation of REST API requests that are made to…
CVE-2020-26072	Cisco Systems, Inc. IoT Field Network Director	Hig	0.57	8.7	0.01	Nov 18, 2020	A vulnerability in the SOAP API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to access and modify information on devices that belong to a different domain. The vulnerability is due to insufficient authorization in the SOAP API. An…
CVE-2020-3456	Cisco Systems, Inc. FXOS Software	Hig	0.57	8.8	0.01	Oct 21, 2020	A vulnerability in the Cisco Firepower Chassis Manager (FCM) of Cisco FXOS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of an affected device. The vulnerability is due to insufficient CSRF…
CVE-2020-3544	Cisco Systems, Inc. 8000p IP Camera Firmware	Hig	0.57	8.8	0.01	Oct 8, 2020	A vulnerability in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute arbitrary code on an affected device or cause the device to reload. This vulnerability is due to…
CVE-2020-3425	Cisco Systems, Inc. iOS Xe	Hig	0.57	8.8	0.02	Sep 24, 2020	Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to elevate privileges to the level of an Administrator user on an affected device. For more information about these…
CVE-2020-3400	Cisco Systems, Inc. iOS Xe	Hig	0.57	8.8	0.01	Sep 24, 2020	A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to utilize parts of the web UI for which they are not authorized.The vulnerability is due to insufficient authorization of web UI access requests. An attacker could…
CVE-2020-3141	Cisco Systems, Inc. iOS Xe	Hig	0.57	8.8	0.02	Sep 24, 2020	Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to elevate privileges to the level of an Administrator user on an affected device. For more information about these…
CVE-2020-3135	Cisco Systems, Inc. Unified Communications Manager	Hig	0.57	8.8	0.01	Sep 23, 2020	A vulnerability in the web-based management interface of Cisco Unified Communications Manager (UCM) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected device. The vulnerability is due to insufficient CSRF…
CVE-2019-16009	Cisco Systems, Inc. Cisco iOS	Hig	0.57	8.8	0.01	Sep 23, 2020	A vulnerability in the web UI of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an…
CVE-2020-3415	Cisco Systems, Inc. NX-OS Software	Hig	0.57	8.8	0.01	Aug 27, 2020	A vulnerability in the Data Management Engine (DME) of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with administrative privileges or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to…
CVE-2020-3507	Cisco Systems, Inc. 8000p IP Camera Firmware	Hig	0.57	8.8	0.01	Aug 26, 2020	Multiple vulnerabilities in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP camera. These vulnerabilities are due to…
CVE-2020-3506	Cisco Systems, Inc. 8000p IP Camera Firmware	Hig	0.57	8.8	0.01	Aug 26, 2020	Multiple vulnerabilities in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP camera. These vulnerabilities are due to…
CVE-2020-3443	Cisco Systems, Inc. Smart Software Manager On Prem	Hig	0.57	8.8	0.02	Aug 26, 2020	A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges. The vulnerability is due to insufficient authorization of the System Operator role capabilities.…
CVE-2020-3386	Cisco Systems, Inc. Data Center Network Manager	Hig	0.57	8.8	0.02	Jul 31, 2020	A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with a low-privileged account to bypass authorization on the API of an affected device. The vulnerability is due to insufficient authorization of…
CVE-2020-3381	Cisco Systems, Inc. SD-WAN vManage Software	Hig	0.57	8.8	0.03	Jul 16, 2020	A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct directory traversal attacks and obtain read and write access to sensitive files on a targeted system. The vulnerability is due to a lack of…
CVE-2020-3332	Cisco Systems, Inc. Small Business RV110W	Hig	0.57	8.8	0.03	Jul 16, 2020	A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker to inject arbitrary shell commands that are executed by an affected device. The vulnerability is due to…
CVE-2020-3146	Cisco Systems, Inc. RV130 VPN Router	Hig	0.57	8.8	0.03	Jul 16, 2020	Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary code on…
CVE-2020-3145	Cisco Systems, Inc. RV130 VPN Router	Hig	0.57	8.8	0.02	Jul 16, 2020	Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary code on…
CVE-2020-3281	Cisco Systems, Inc. Digital Network Architecture Center	Hig	0.57	8.8	0.01	Jun 3, 2020	A vulnerability in the audit logging component of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view sensitive information in clear text. The vulnerability is due to the storage of certain unencrypted credentials. An attacker…
CVE-2020-3234	Cisco Systems, Inc. Cisco iOS	Hig	0.57	8.8	0.00	Jun 3, 2020	A vulnerability in the virtual console authentication of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an authenticated but low-privileged, local attacker to…
CVE-2020-3224	Cisco Systems, Inc. iOS Xe	Hig	0.57	8.8	0.02	Jun 3, 2020	A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to inject IOS commands to an affected device. The injected commands should require a higher privilege level in order to be…
CVE-2020-3219	Cisco Systems, Inc. iOS Xe	Hig	0.57	8.8	0.03	Jun 3, 2020	A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject and execute arbitrary commands with administrative privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient…
CVE-2020-3217	Cisco Systems, Inc. Cisco iOS	Hig	0.57	8.8	0.01	Jun 3, 2020	A vulnerability in the Topology Discovery Service of Cisco One Platform Kit (onePK) in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a denial of…
CVE-2020-3205	Cisco Systems, Inc. Cisco iOS	Hig	0.57	8.8	0.01	Jun 3, 2020	A vulnerability in the implementation of the inter-VM channel of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, adjacent attacker to execute…
CVE-2020-3199	Cisco Systems, Inc. Cisco iOS	Hig	0.57	8.8	0.01	Jun 3, 2020	Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) that are running Cisco IOS Software could allow an attacker to cause a denial of…
CVE-2019-16012	Cisco Systems, Inc. SD-WAN Solution vManage	Hig	0.57	8.1	0.54	Mar 19, 2020	A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web UI improperly validates SQL values. An attacker could exploit…
CVE-2020-3172	Cisco Systems, Inc. FXOS Software	Hig	0.57	8.8	0.02	Feb 26, 2020	A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service (DoS) condition on an affected device. The vulnerability…
CVE-2020-3114	Cisco Systems, Inc. Data Center Network Manager	Hig	0.57	8.8	0.01	Feb 19, 2020	A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF…
CVE-2020-3112	Cisco Systems, Inc. Data Center Network Manager	Hig	0.57	8.8	0.01	Feb 19, 2020	A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to elevate privileges on the application. The vulnerability is due to insufficient access control validation. An attacker could exploit this…
CVE-2020-3111	Cisco Systems, Inc. IP Phone	Hig	0.57	8.8	0.03	Feb 5, 2020	A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP phone. The vulnerability is due to missing checks when…
CVE-2013-2678	Linksys E4200	Hig	0.57	8.1	0.17	Feb 4, 2020	Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted URL request to the apply.cgi script using the submit_type parameter.
CVE-2020-3115	Cisco Systems, Inc. SD-WAN Solution vManage	Hig	0.57	8.8	0.00	Jan 26, 2020	A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to elevate privileges to root-level privileges on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could…
CVE-2019-15972	Cisco Systems, Inc. Unified Communications Manager	Hig	0.57	8.8	0.02	Nov 26, 2019	A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly…
CVE-2019-15956	Cisco Systems, Inc. Web Security Appliance	Hig	0.57	8.8	0.01	Nov 26, 2019	A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform an unauthorized system reset on an affected device. The vulnerability is due to improper authorization…
CVE-2019-15288	Cisco Systems, Inc. RoomOS	Hig	0.57	8.8	0.02	Nov 26, 2019	A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE), Cisco TelePresence Codec (TC), and Cisco RoomOS Software could allow an authenticated, remote attacker to escalate privileges to an unrestricted user of the restricted shell. The vulnerability is due…
CVE-2019-12636	Cisco Systems, Inc. Small Business Smart and Managed Switches	Hig	0.57	8.8	0.01	Oct 16, 2019	A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF…
CVE-2019-12689	Cisco Systems, Inc. Firepower Management Center	Hig	0.57	8.8	0.03	Oct 2, 2019	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. The vulnerability is due to insufficient…
CVE-2019-12688	Cisco Systems, Inc. Firepower Management Center	Hig	0.57	8.8	0.03	Oct 2, 2019	A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability…
CVE-2019-12687	Cisco Systems, Inc. Firepower Management Center	Hig	0.57	8.8	0.03	Oct 2, 2019	A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability…
CVE-2019-12686	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Hig	0.57	8.8	0.03	Oct 2, 2019	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input…
CVE-2019-12685	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Hig	0.57	8.8	0.03	Oct 2, 2019	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input…
CVE-2019-12684	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Hig	0.57	8.8	0.03	Oct 2, 2019	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input…
CVE-2019-12683	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Hig	0.57	8.8	0.03	Oct 2, 2019	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input…
CVE-2019-12682	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Hig	0.57	8.8	0.03	Oct 2, 2019	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input…
CVE-2019-12681	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Hig	0.57	8.8	0.03	Oct 2, 2019	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input…
CVE-2019-12680	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Hig	0.57	8.8	0.03	Oct 2, 2019	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input…
CVE-2019-12679	Cisco Systems, Inc. Firepower Management Center	Hig	0.57	8.8	0.03	Oct 2, 2019	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input…

CVE-2021-1272HigJan 20, 2021
Cisco Systems, Inc.
Data Center Network Manager
risk 0.57cvss 8.8epss 0.01
A vulnerability in the session validation feature of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. This vulnerability is due to…
CVE-2021-1257HigJan 20, 2021
Cisco Systems, Inc.
Dna Center
risk 0.57cvss 8.8epss 0.01
A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to manipulate an authenticated user into executing malicious actions without their awareness…
CVE-2021-1144HigJan 13, 2021
Cisco Systems, Inc.
Connected Mobile Experiences (CMX)
risk 0.57cvss 8.8epss 0.01
A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system. The vulnerability is due to incorrect handling of authorization checks for changing…
CVE-2020-26075HigNov 18, 2020
Cisco Systems, Inc.
IoT Field Network Director
risk 0.57cvss 8.8epss 0.02
A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to gain access to the back-end database of an affected device. The vulnerability is due to insufficient input validation of REST API requests that are made to…
CVE-2020-26072HigNov 18, 2020
Cisco Systems, Inc.
IoT Field Network Director
risk 0.57cvss 8.7epss 0.01
A vulnerability in the SOAP API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to access and modify information on devices that belong to a different domain. The vulnerability is due to insufficient authorization in the SOAP API. An…
CVE-2020-3456HigOct 21, 2020
Cisco Systems, Inc.
FXOS Software
risk 0.57cvss 8.8epss 0.01
A vulnerability in the Cisco Firepower Chassis Manager (FCM) of Cisco FXOS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of an affected device. The vulnerability is due to insufficient CSRF…
CVE-2020-3544HigOct 8, 2020
Cisco Systems, Inc.
8000p IP Camera Firmware
risk 0.57cvss 8.8epss 0.01
A vulnerability in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute arbitrary code on an affected device or cause the device to reload. This vulnerability is due to…
CVE-2020-3425HigSep 24, 2020
Cisco Systems, Inc.
iOS Xe
risk 0.57cvss 8.8epss 0.02
Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to elevate privileges to the level of an Administrator user on an affected device. For more information about these…
CVE-2020-3400HigSep 24, 2020
Cisco Systems, Inc.
iOS Xe
risk 0.57cvss 8.8epss 0.01
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to utilize parts of the web UI for which they are not authorized.The vulnerability is due to insufficient authorization of web UI access requests. An attacker could…
CVE-2020-3141HigSep 24, 2020
Cisco Systems, Inc.
iOS Xe
risk 0.57cvss 8.8epss 0.02
Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to elevate privileges to the level of an Administrator user on an affected device. For more information about these…
CVE-2020-3135HigSep 23, 2020
Cisco Systems, Inc.
Unified Communications Manager
risk 0.57cvss 8.8epss 0.01
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (UCM) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected device. The vulnerability is due to insufficient CSRF…
CVE-2019-16009HigSep 23, 2020
Cisco Systems, Inc.
Cisco iOS
risk 0.57cvss 8.8epss 0.01
A vulnerability in the web UI of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an…
CVE-2020-3415HigAug 27, 2020
Cisco Systems, Inc.
NX-OS Software
risk 0.57cvss 8.8epss 0.01
A vulnerability in the Data Management Engine (DME) of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with administrative privileges or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to…
CVE-2020-3507HigAug 26, 2020
Cisco Systems, Inc.
8000p IP Camera Firmware
risk 0.57cvss 8.8epss 0.01
Multiple vulnerabilities in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP camera. These vulnerabilities are due to…
CVE-2020-3506HigAug 26, 2020
Cisco Systems, Inc.
8000p IP Camera Firmware
risk 0.57cvss 8.8epss 0.01
Multiple vulnerabilities in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP camera. These vulnerabilities are due to…
CVE-2020-3443HigAug 26, 2020
Cisco Systems, Inc.
Smart Software Manager On Prem
risk 0.57cvss 8.8epss 0.02
A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges. The vulnerability is due to insufficient authorization of the System Operator role capabilities.…
CVE-2020-3386HigJul 31, 2020
Cisco Systems, Inc.
Data Center Network Manager
risk 0.57cvss 8.8epss 0.02
A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with a low-privileged account to bypass authorization on the API of an affected device. The vulnerability is due to insufficient authorization of…
CVE-2020-3381HigJul 16, 2020
Cisco Systems, Inc.
SD-WAN vManage Software
risk 0.57cvss 8.8epss 0.03
A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct directory traversal attacks and obtain read and write access to sensitive files on a targeted system. The vulnerability is due to a lack of…
CVE-2020-3332HigJul 16, 2020
Cisco Systems, Inc.
Small Business RV110W
risk 0.57cvss 8.8epss 0.03
A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker to inject arbitrary shell commands that are executed by an affected device. The vulnerability is due to…
CVE-2020-3146HigJul 16, 2020
Cisco Systems, Inc.
RV130 VPN Router
risk 0.57cvss 8.8epss 0.03
Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary code on…
CVE-2020-3145HigJul 16, 2020
Cisco Systems, Inc.
RV130 VPN Router
risk 0.57cvss 8.8epss 0.02
Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary code on…
CVE-2020-3281HigJun 3, 2020
Cisco Systems, Inc.
Digital Network Architecture Center
risk 0.57cvss 8.8epss 0.01
A vulnerability in the audit logging component of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view sensitive information in clear text. The vulnerability is due to the storage of certain unencrypted credentials. An attacker…
CVE-2020-3234HigJun 3, 2020
Cisco Systems, Inc.
Cisco iOS
risk 0.57cvss 8.8epss 0.00
A vulnerability in the virtual console authentication of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an authenticated but low-privileged, local attacker to…
CVE-2020-3224HigJun 3, 2020
Cisco Systems, Inc.
iOS Xe
risk 0.57cvss 8.8epss 0.02
A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to inject IOS commands to an affected device. The injected commands should require a higher privilege level in order to be…
CVE-2020-3219HigJun 3, 2020
Cisco Systems, Inc.
iOS Xe
risk 0.57cvss 8.8epss 0.03
A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject and execute arbitrary commands with administrative privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient…
CVE-2020-3217HigJun 3, 2020
Cisco Systems, Inc.
Cisco iOS
risk 0.57cvss 8.8epss 0.01
A vulnerability in the Topology Discovery Service of Cisco One Platform Kit (onePK) in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a denial of…
CVE-2020-3205HigJun 3, 2020
Cisco Systems, Inc.
Cisco iOS
risk 0.57cvss 8.8epss 0.01
A vulnerability in the implementation of the inter-VM channel of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, adjacent attacker to execute…
CVE-2020-3199HigJun 3, 2020
Cisco Systems, Inc.
Cisco iOS
risk 0.57cvss 8.8epss 0.01
Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) that are running Cisco IOS Software could allow an attacker to cause a denial of…
CVE-2019-16012HigMar 19, 2020
Cisco Systems, Inc.
SD-WAN Solution vManage
risk 0.57cvss 8.1epss 0.54
A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web UI improperly validates SQL values. An attacker could exploit…
CVE-2020-3172HigFeb 26, 2020
Cisco Systems, Inc.
FXOS Software
risk 0.57cvss 8.8epss 0.02
A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service (DoS) condition on an affected device. The vulnerability…
CVE-2020-3114HigFeb 19, 2020
Cisco Systems, Inc.
Data Center Network Manager
risk 0.57cvss 8.8epss 0.01
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF…
CVE-2020-3112HigFeb 19, 2020
Cisco Systems, Inc.
Data Center Network Manager
risk 0.57cvss 8.8epss 0.01
A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to elevate privileges on the application. The vulnerability is due to insufficient access control validation. An attacker could exploit this…
CVE-2020-3111HigFeb 5, 2020
Cisco Systems, Inc.
IP Phone
risk 0.57cvss 8.8epss 0.03
A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP phone. The vulnerability is due to missing checks when…
CVE-2013-2678HigFeb 4, 2020
Linksys
E4200
risk 0.57cvss 8.1epss 0.17
Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted URL request to the apply.cgi script using the submit_type parameter.
CVE-2020-3115HigJan 26, 2020
Cisco Systems, Inc.
SD-WAN Solution vManage
risk 0.57cvss 8.8epss 0.00
A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to elevate privileges to root-level privileges on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could…
CVE-2019-15972HigNov 26, 2019
Cisco Systems, Inc.
Unified Communications Manager
risk 0.57cvss 8.8epss 0.02
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly…
CVE-2019-15956HigNov 26, 2019
Cisco Systems, Inc.
Web Security Appliance
risk 0.57cvss 8.8epss 0.01
A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform an unauthorized system reset on an affected device. The vulnerability is due to improper authorization…
CVE-2019-15288HigNov 26, 2019
Cisco Systems, Inc.
RoomOS
risk 0.57cvss 8.8epss 0.02
A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE), Cisco TelePresence Codec (TC), and Cisco RoomOS Software could allow an authenticated, remote attacker to escalate privileges to an unrestricted user of the restricted shell. The vulnerability is due…
CVE-2019-12636HigOct 16, 2019
Cisco Systems, Inc.
Small Business Smart and Managed Switches
risk 0.57cvss 8.8epss 0.01
A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF…
CVE-2019-12689HigOct 2, 2019
Cisco Systems, Inc.
Firepower Management Center
risk 0.57cvss 8.8epss 0.03
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. The vulnerability is due to insufficient…
CVE-2019-12688HigOct 2, 2019
Cisco Systems, Inc.
Firepower Management Center
risk 0.57cvss 8.8epss 0.03
A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability…
CVE-2019-12687HigOct 2, 2019
Cisco Systems, Inc.
Firepower Management Center
risk 0.57cvss 8.8epss 0.03
A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability…
CVE-2019-12686HigOct 2, 2019
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.57cvss 8.8epss 0.03
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input…
CVE-2019-12685HigOct 2, 2019
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.57cvss 8.8epss 0.03
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input…
CVE-2019-12684HigOct 2, 2019
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.57cvss 8.8epss 0.03
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input…
CVE-2019-12683HigOct 2, 2019
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.57cvss 8.8epss 0.03
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input…
CVE-2019-12682HigOct 2, 2019
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.57cvss 8.8epss 0.03
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input…
CVE-2019-12681HigOct 2, 2019
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.57cvss 8.8epss 0.03
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input…
CVE-2019-12680HigOct 2, 2019
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.57cvss 8.8epss 0.03
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input…
CVE-2019-12679HigOct 2, 2019
Cisco Systems, Inc.
Firepower Management Center
risk 0.57cvss 8.8epss 0.03
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input…

Page 11 of 140