Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco SD-WAN Solution SQL Injection Vulnerability
Vulnerability Description
A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted input that includes SQL statements to an affected system. A successful exploit could allow the attacker to modify entries in some database tables, affecting the integrity of the data.
CVSS Information
N/A
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
Cisco SD-WAN Solution SQL注入漏洞
Vulnerability Description
Cisco SD-WAN Solution是美国思科（Cisco）公司的一套网络扩展解决方案。 Cisco SD-WAN Solution vManage 17.2.0及之前版本中的Web接口存在SQL注入漏洞，该漏洞源于程序没有充分验证用户提交的输入。远程攻击者可通过发送特制的输入利用该漏洞修改数据库表单的条目，影响数据的完整性。
CVSS Information
N/A
Vulnerability Type
N/A