SD
Product
Sd-wan
103
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 19High 65Medium 18Low 1
Watch
Add Sd-wan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-33512 | 9.8 | May 1 | There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remote code execution by sending specially… Affected: 8.7.0.0; 8.6.0.4 |
| CVE-2024-33511 | 9.8 | May 1 | There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.7.0.0; 8.6.0.4 |
| CVE-2024-26305 | 9.8 | May 1 | There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 8.6.0.4-2.2.0.0; 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0; 8.7.0.0-2.3.0.9 |
| CVE-2024-26304 | 9.8 | May 1 | There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets… Affected: 8.7.0.0; 8.6.0.4 |
| CVE-2023-22757 | 9.8 | Mar 1 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22756 | 9.8 | Mar 1 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22755 | 9.8 | Mar 1 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22754 | 9.8 | Mar 1 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22753 | 9.8 | Mar 1 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22752 | 9.8 | Mar 1 | There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22751 | 9.8 | Mar 1 | There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22750 | 9.8 | Mar 1 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22749 | 9.8 | Mar 1 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22748 | 9.8 | Mar 1 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22747 | 9.8 | Mar 1 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2022-37897 | 9.8 | Dec 12 | There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP… Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2021-37716 | 9.8 | Sep 7 | A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2020-24634 | 9.8 | Dec 11 | An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI (Aruba Networks AP Management protocol) UDP port (8211) of… Affected: before 2.1.0.2; 2.2.0.0 before 2.2.0.1 |
| CVE-2020-24633 | 9.8 | Dec 11 | There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI (Aruba… Affected: before 2.1.0.2; 2.2.0.0 before 2.2.0.1 |
Showing 19