Tag
3 results in the archive.
Arista disclosed a critical zero-day SQL injection vulnerability in its VeloCloud Orchestrator, exploited to escalate privileges despite read-only accounts, impacting SD-WAN management systems.
Cisco disclosed a critical zero-day authentication bypass vulnerability in its Catalyst SD-WAN Manager allowing unauthenticated remote attackers to gain admin access via the API.
Cisco released patches for 12 critical vulnerabilities in Catalyst SD-WAN and IOS XE software impacting devices in all configurations.