CVSS: 8.0EPSS: 0%CPEs: 2EXPL: 0CVE-2019-1647 – Cisco SD-WAN Solution Unauthorized Access Vulnerability
https://notcve.org/view.php?id=CVE-2019-1647
24 Jan 2019 — A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, adjacent attacker to bypass authentication and have direct unauthorized access to other vSmart containers. The vulnerability is due to an insecure default configuration of the affected system. An attacker could exploit this vulnerability by directly connecting to the exposed services. An exploit could allow the attacker to retrieve and modify critical system files. Una vulnerabilidad en la solución Cisco SD-WAN podría permitir a un a... • http://www.securityfocus.com/bid/106705 • CWE-284: Improper Access Control •
CVSS: 7.8EPSS: 0%CPEs: 12EXPL: 0CVE-2019-1648 – Cisco SD-WAN Solution Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2019-1648
24 Jan 2019 — A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the group configuration. An attacker could exploit this vulnerability by writing a crafted file to the directory where the user group configuration is located in the underlying operating system. A successful exploit could allow the attacker to g... • http://www.securityfocus.com/bid/106719 • CWE-20: Improper Input Validation CWE-264: Permissions, Privileges, and Access Controls •