cisco vedge 100b firmware
productUScpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
by severity
1critical13high4medium0low
updated 2026-10-30
01
vulnerabilities (18)
Related CVEs.
| ID | severity | exploitable | ||||
|---|---|---|---|---|---|---|
| CVE-2018-0350US | high8.8 | — | ||||
A vulnerability in the VPN subsystem configuration in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with ro… | ||||||
| CVE-2018-0349US | critical9.8 | — | ||||
A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. Th… | ||||||
| CVE-2018-0345US | high8.8 | — | ||||
A vulnerability in the configuration and management database of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to execute arbitrary commands with the privi… | ||||||
| CVE-2018-0348US | high7.2 | — | ||||
A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulne… | ||||||
| CVE-2018-0344US | high7.2 | — | ||||
A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execu… | ||||||
| CVE-2018-0346US | high7.5 | — | ||||
A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on… | ||||||
| CVE-2018-0343US | high8.8 | — | ||||
A vulnerability in the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to execute arbitrary code with vmanage user p… | ||||||
| CVE-2021-1513US | high7.5 | — | ||||
A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting in a denial of service (DoS)… | ||||||
| CVE-2021-1510US | high7.5 | — | ||||
Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affect… | ||||||
| CVE-2021-1509US | high7.5 | — | ||||
Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affect… | ||||||
| CVE-2021-1511US | medium6.5 | — | ||||
Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affect… | ||||||
| CVE-2018-0351US | high7.8 | — | ||||
A vulnerability in the command-line tcpdump utility in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with ro… | ||||||
| CVE-2018-0347US | high7.8 | — | ||||
A vulnerability in the Zero Touch Provisioning (ZTP) subsystem of the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are execu… | ||||||
| CVE-2018-0342US | medium6.7 | — | ||||
A vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could allow an authenticated, local attacker to execute arbitrary code with root privileges… | ||||||
| CVE-2021-1514US | high7.8 | — | ||||
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with Administrator privileges on the un… | ||||||
| CVE-2021-1528US | high7.8 | — | ||||
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected system. This vulnerability exists becaus… | ||||||
| CVE-2021-1546US | medium5.5 | — | ||||
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information. This vulnerability is due to improper protections… | ||||||
| CVE-2021-1512US | medium6.0 | — | ||||
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system. T… | ||||||
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-77Improper Neutralization of Special Elements used in a Command6 CVEs
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer5 CVEs
- CWE-20Improper Input Validation4 CVEs
- CWE-78Improper Neutralization of Special Elements used in an OS Command3 CVEs
- CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
- CWE-250Execution with Unnecessary Privileges1 CVEs
- CWE-269Improper Privilege Management1 CVEs
- CWE-284Improper Access Control1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE18 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan