CVE Vulnerability Advisory Database

[Affected Scope] Cisco ASA and FTD Software with Remote Access SSL VPN enabled and secondary authentication configured.

[Impact] Unauthenticated remote attackers can trigger an unexpected device reload, leading to a complete Denial of Service (DoS) of VPN services.

[Mitigation] Apply the latest security patches from Cisco immediately; review secondary authentication configurations if patching is delayed.

[Affected Scope] All versions of Cisco Secure Email Gateway with Advanced Malware Protection (AMP) and File Reputation service enabled.

[Impact] An unauthenticated remote attacker can overwrite system files and execute arbitrary commands with root privileges by sending a crafted email attachment.

[Mitigation] Immediately apply the official AsyncOS security patches provided by Cisco. If patching is not possible, disable the AMP File Reputation feature as a temporary workaround.

[Affected Scope] Cisco Catalyst SD-WAN Manager (formerly vManage) software

[Impact] An unauthenticated, remote attacker can bypass authentication mechanisms and gain full administrative access to the system via crafted HTTP requests.

[Mitigation] Immediately apply the official security patches provided by Cisco and restrict access to management interfaces using ACLs.

[Affected Scope] Cisco Identity Services Engine (ISE) web-based management interface and API endpoints.

[Impact] Unauthenticated remote attackers can gain full administrative access to the device by bypassing authentication controls.

[Mitigation] Apply the latest security patches from Cisco immediately and restrict access to management interfaces via ACLs.

[Affected Scope] All Cisco Secure Email Gateway appliances running vulnerable versions of Cisco AsyncOS Software.

[Impact] An unauthenticated remote attacker can execute arbitrary commands with root privileges by sending a crafted email, leading to full system compromise.

[Mitigation] Immediately apply the official security patches provided by Cisco and monitor for signs of exploitation.

[Affected Scope] Cisco Secure Firewall ASA and FTD Software with Remote Access SSL VPN service enabled

[Impact] Unauthenticated, remote attackers can cause an unexpected device reload, leading to a complete Denial of Service (DoS) condition

[Mitigation] Immediately upgrade to the patched software versions recommended in the Cisco Security Advisory

[Affected Scope] Web interface of Cisco Secure Firewall Management Center (FMC) Software

[Impact] Unauthenticated remote attackers can log in using hardcoded low-privileged credentials to access sensitive data, which can be chained with other flaws to escalate privileges

[Mitigation] Apply the official Cisco security updates immediately and restrict public internet access to the FMC management interface

[Affected Scope] Web UI and API endpoints of Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage)

[Impact] An authenticated remote attacker can create or overwrite arbitrary files on the filesystem, potentially leading to root privilege escalation

[Mitigation] Immediately apply the official Cisco security patches and monitor unauthorized API requests and file upload activities

[Affected Scope] Cisco Catalyst SD-WAN Controller (formerly vSmart), Manager (formerly vManage), and Validator (formerly vBond)

[Impact] An authenticated, local attacker with netadmin privileges can execute arbitrary commands as root and push unauthorized configuration changes to edge devices

[Mitigation] Immediately upgrade to the fixed software versions recommended by Cisco and verify the configuration integrity of all managed edge devices.

[Affected Scope] Cisco Unified Communications Manager (Unified CM) and Session Management Edition (Unified CM SME) with WebDialer service enabled

[Impact] Unauthenticated remote attackers can perform SSRF, write arbitrary files to the underlying OS, and subsequently escalate privileges to root

[Mitigation] Apply official Cisco security patches immediately, or disable the WebDialer service as a temporary workaround

[Affected Scope] Cisco Catalyst SD-WAN Controller (formerly vSmart), Manager (formerly vManage), and Validator (formerly vBond)

[Impact] Unauthenticated remote attackers can bypass authentication to obtain administrative privileges and manipulate the SD-WAN fabric configuration via NETCONF

[Mitigation] Apply official security patches immediately, and perform system checks on control connections as a temporary measure

[Affected Scope] Web-based management interface of Cisco Secure Firewall Management Center (FMC) Software.

[Impact] Unauthenticated, remote attackers can execute arbitrary Java code with root privileges by sending crafted serialized Java objects.

[Mitigation] Apply official Cisco security patches immediately and restrict public internet access to the FMC management interface.

[Affected Scope] Web-based management interface of Cisco Secure Firewall Management Center (FMC) Software

[Impact] Unauthenticated remote attackers can bypass authentication and execute scripts to obtain full root access to the underlying operating system

[Mitigation] Immediate application of official security patches and restriction of management interface access via ACLs

[Affected Scope] Network devices and virtual appliances running Cisco Catalyst SD-WAN Software

[Impact] Attackers can bypass file system restrictions via vshell access to read sensitive underlying operating system information

[Mitigation] Apply the official Cisco security patches immediately and restrict vshell/CLI access privileges

[Affected Scope] Cisco Catalyst SD-WAN Manager releases prior to 20.18

[Impact] Unauthenticated, remote attackers can retrieve the DCA password file via crafted HTTP requests and gain unauthorized DCA user privileges

[Mitigation] Immediately upgrade Cisco Catalyst SD-WAN Manager to release 20.18 or later

[Affected Scope] Cisco Catalyst SD-WAN Manager (formerly vManage) API interface

[Impact] Authenticated remote attackers with read-only API credentials can overwrite arbitrary files on the local file system and gain vmanage user privileges

[Mitigation] Apply official Cisco security patches immediately, restrict API access, and audit API permissions for low-privileged accounts

[Affected Scope] Cisco 871 Integrated Services Routers (ISR) running Cisco IOS 12.4 with the HTTP Administration component enabled.

[Impact] Remote attackers can execute arbitrary commands with privilege level 15 by tricking an authenticated administrator into visiting a malicious link, leading to complete device compromise.

[Mitigation] Disable the HTTP/HTTPS server on the router, restrict access using IP-based Access Control Lists (ACLs), or upgrade to a patched Cisco IOS release.