[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFmv2lH1NJ5tgwoa-WLmx5NtWjZTCMT7lyj-dpNXynFg":3,"g5a-ex:cisco\u002Fvedge_5000@*":92,"g5a-family:cisco\u002Fvedge_5000":94},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":69,"seoMetadata":70,"meta":89},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"cisco","vedge_5000",0,29,"2022-09-30",[],"Vedge 5000 by Cisco is a technology product and 29 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,31,38,44,50,54,59,63,66],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2019-16012","A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web UI improperly validates SQL values. An attacker could exploit this vulnerability by authenticating to the application and sending malicious SQL queries to an affected system. A successful exploit could allow the attacker to modify values on, or return values from, the underlying database as well as the operating system.","2020-03-19",8.1,"v3.1","High",false,0.54249,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":30},"CVE-2019-1650","A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the save command in the CLI of the affected software. An attacker could exploit this vulnerability by modifying the save command in the CLI of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying operating system of an affected device and escalate their privileges to the root user.","2019-01-24",8.8,0.03475,{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"cvssVersion":21,"severity":36,"isKev":23,"epssScore":37},"CVE-2020-3401","A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain read access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to the affected system. A successful exploit could allow the attacker to view arbitrary files on the affected system.","2020-07-16",6.5,"Medium",0.02646,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":29,"cvssVersion":42,"severity":22,"isKev":23,"epssScore":43},"CVE-2018-0432","A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the error reporting application configuration. An attacker could exploit this vulnerability by sending a crafted command to the error reporting feature. A successful exploit could allow the attacker to gain root-level privileges and take full control of the device.","2018-10-05","v3.0",0.02633,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":49},"CVE-2021-1513","A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient handling of malformed packets. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.","2021-05-06",7.5,0.01519,{"cveId":51,"description":52,"publishedDate":34,"cvssScore":48,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":53},"CVE-2020-3369","A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper processing of FTP traffic. An attacker could exploit this vulnerability by sending crafted FTP packets through an affected device. A successful exploit could allow the attacker to make the device reboot continuously, causing a DoS condition.",0.01415,{"cveId":55,"description":56,"publishedDate":34,"cvssScore":57,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":58},"CVE-2020-3351","A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper validation of fields in Cisco SD-WAN peering messages that are encapsulated in UDP packets. An attacker could exploit this vulnerability by sending crafted UDP messages to the targeted system. A successful exploit could allow the attacker to cause services on the device to fail, resulting in a DoS condition that could impact the targeted device and other devices that depend on it.",8.6,0.01374,{"cveId":60,"description":61,"publishedDate":47,"cvssScore":48,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":62},"CVE-2021-1510","Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.",0.0122,{"cveId":64,"description":61,"publishedDate":47,"cvssScore":48,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":65},"CVE-2021-1509",0.01216,{"cveId":67,"description":61,"publishedDate":47,"cvssScore":35,"cvssVersion":21,"severity":36,"isKev":23,"epssScore":68},"CVE-2021-1511",0.01024,[],{"title":71,"metaDescription":72,"keywords":73,"structuredData":74},"Vedge 5000 by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Vedge 5000 by Cisco with 29 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Vedge 5000 vulnerabilities, Vedge 5000 security, Vedge 5000 CVE, Cisco Vedge 5000, Vedge 5000 threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":75,"@type":76,"name":77,"description":72,"url":78,"manufacturer":79,"applicationCategory":83,"softwareVersion":84,"mainEntity":85},"https:\u002F\u002Fschema.org","SoftwareApplication","Vedge 5000","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fvedge_5000",{"@type":80,"name":81,"url":82},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","Multiple versions",{"@type":86,"name":87,"description":88,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Vedge 5000 Security Vulnerabilities","Security vulnerabilities affecting Vedge 5000 by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":90,"apiVersion":91},"2026-10-19T00:53:58.548Z","3.0",{"rows":93,"total":9,"capped":23,"failed":9},[],[95,98],{"product":96,"cves":97},"vedge_5000_router",15,{"product":99,"cves":100},"vedge_5000_firmware",14]