Known vulnerabilities in Cisco SD-WAN vBond Orchestrator

Vendor: Cisco Systems, Inc
Software: Cisco SD-WAN vBond Orchestrator
Software CPE: cpe:2.3:a:cisco_systems:cisco_sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 29
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco SD-WAN vBond Orchestrator Cisco SD-WAN vBond Orchestrator is affected by 29 known vulnerabilities: 3 high, 5 medium, 21 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67748 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20850		 CWE-22 Low
No
No
 - 29.09.2022 SB2022092928
#VU67747 - Improper Access Control
CVE-2022-20818		 CWE-284 Low
No
No
 - 29.09.2022 SB2022092927
#VU67746 - Improper Access Control
CVE-2022-20775		 CWE-284 Low
No
Exploited
 - 29.09.2022 SB2022092926
#VU62345 - Improper Access Control
CVE-2022-20716		 CWE-284 Low
No
No
 20.6.1, 20.7.1 15.04.2022 SB2022041503
#VU59955 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-20655		 CWE-78 Low
No
No
 18.4.4, 19.2.1, 19.3.0, 20.1.1 24.01.2022 SB2022012410
SB2022012512
#VU56871 - Command injection
CVE-2021-34726		 CWE-77 Low
No
No
 - 24.09.2021 SB2021092423
#VU53756 - Execution with Unnecessary Privileges
CVE-2021-1528		 CWE-250 Low
No
No
 20.4.2, 20.5.1 03.06.2021 SB2021060305
#VU52934 - Improper input validation
CVE-2021-1514		 CWE-20 Low
No
No
 18.3.0, 18.4.0, 19.1.0, 19.2.0, 19.3.0, 20.1.1, 20.3.1, 20.4.1, 20.5.1 06.05.2021 SB2021050623
#VU52932 - Improper input validation
CVE-2021-1513		 CWE-20 Medium
No
No
 20.4.1, 20.5.1 06.05.2021 SB2021050622
#VU52931 - Files or Directories Accessible to External Parties
CVE-2021-1512		 CWE-552 Low
No
No
 18.4.6, 19.2.3, 20.1.2, 20.3.1, 20.4.1, 20.5.1 06.05.2021 SB2021050619
#VU49899 - Memory corruption
CVE-2021-1301		 CWE-119 Medium
No
No
 - 21.01.2021 SB2021012109
#VU49895 - Command injection
CVE-2021-1263		 CWE-77 Low
No
No
 - 21.01.2021 SB2021012108
#VU49893 - Command injection
CVE-2021-1261		 CWE-77 Low
No
No
 - 21.01.2021 SB2021012108
#VU50010 - Improper input validation
CVE-2021-1233		 CWE-20 Low
No
No
 - 20.01.2021 SB2021012617
#VU50012 - Memory corruption
CVE-2021-1273		 CWE-119 Medium
No
No
 - 20.01.2021 SB2021012618
#VU50013 - NULL Pointer Dereference
CVE-2021-1274		 CWE-476 Medium
No
No
 - 20.01.2021 SB2021012618
#VU50014 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-1278		 CWE-59 Low
No
No
 - 20.01.2021 SB2021012618
#VU50015 - Improper input validation
CVE-2021-1279		 CWE-20 Medium
No
No
 - 20.01.2021 SB2021012618
#VU49892 - Command injection
CVE-2021-1260		 CWE-77 Low
No
No
 - 20.01.2021 SB2021012108
#VU49898 - Memory corruption
CVE-2021-1300		 CWE-119 High
No
No
 - 20.01.2021 SB2021012109


Showing elements 1 - 20 out of 29