cisco sd-wan

Name: cisco sd-wan
Brand: cisco

productUS

cpe:2.3:a:cisco:sd-wan:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical17high7medium0low

updated 2026-10-28

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-20775US	high7.8OT critical	12.5% (96th)	KEV	20.7.2	2022-09-30	3 versions
CVE-2022-20818US	high7.8	0.63% (50th)	Exploit	20.9	2022-09-30	< 20.9
CVE-2020-27128US	medium6.5	60.8% (99th)	—	20.3.1	2020-11-06	< 20.3.1
CVE-2019-1624US	high8.8	4.25% (91st)	—	18.4.0	2019-06-20	< 18.4.0
CVE-2020-3375US	critical9.8	3.90% (90th)	—	18.4.5	2020-07-31	4 versions
CVE-2019-1650US	high8.8	3.48% (89th)	—	18.4.0	2019-01-24	< 18.4.0
CVE-2020-3374US	critical9.9OT elevated	1.92% (80th)	—	18.4.5	2020-07-31	4 versions
CVE-2021-1614US	medium5.3	1.19% (68th)	—	20.5.1	2021-07-22	5 versions
CVE-2018-15387US	critical9.8	1.10% (65th)	—	17.2.8	2018-10-05	2 versions
CVE-2021-1589US	medium6.5	0.97% (62nd)	—	20.3.4	2021-09-23	4 versions
CVE-2022-20844US	medium5.3OT elevated	0.92% (60th)	—	20.6.3	2022-09-30	5 versions
CVE-2019-1647US	high8.0	0.81% (57th)	—	18.4.0	2019-01-24	< 18.4.0
CVE-2023-20034US	high7.5OT elevated	0.79% (56th)	—	20.3.4	2023-09-27	3 versions
CVE-2020-3536US	medium5.4	0.63% (50th)	—	no fix	2020-10-08	2 versions
CVE-2019-1646US	high7.8	0.45% (39th)	—	18.4.0	2019-01-24	< 18.4.0
CVE-2019-1648US	high7.8	0.37% (31st)	—	18.4.0	2019-01-24	< 18.4.0
CVE-2021-34726US	medium6.7	0.37% (30th)	—	19.2.3	2021-09-23	6 versions
CVE-2020-3600US	high7.8OT elevated	0.29% (21st)	—	20.1.2	2020-11-06	2 versions
CVE-2020-3595US	high7.8	0.29% (21st)	—	20.3.2	2020-11-06	2 versions
CVE-2020-3594US	high7.8	0.29% (21st)	—	20.1.2	2020-11-06	2 versions
CVE-2020-3593US	high7.8	0.29% (21st)	—	20.3.1	2020-11-06	2 versions
CVE-2020-3180US	high7.8	0.28% (21st)	—	18.3.6	2020-07-16	3 versions
CVE-2023-20113US	high8.1	0.26% (18th)	—	20.6.5	2023-03-23	3 versions
CVE-2022-20930US	medium6.7	0.26% (17th)	—	20.6.2	2022-09-30	3 versions
CVE-2021-1612US	high7.1	0.25% (16th)	—	17.3.4	2021-09-23	< 17.3.4
CVE-2022-20716US	high7.8	0.22% (12th)	—	20.6.1	2022-04-15	2 versions
CVE-2022-20850US	high7.1	0.21% (11th)	—	18.4.5	2022-09-30	< 18.4.5

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation5 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-250Execution with Unnecessary Privileges4 CVEs
CWE-264CWE-2644 CVEs
CWE-269Improper Privilege Management4 CVEs
CWE-284Improper Access Control3 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan