Cisco Fixes Security Holes in SD-WAN, Webex, Small Business Routers

Ganesh The Awesome Senior Pre & Post-Sales Engineer at GlobalDots

25th January, 2019 1 Min read

Cisco has fixed a heap of security holes in a variety of its products, including a critical one affecting its SD-WAN Solution.

The most critical among the flaws fixed are a buffer overflow vulnerability (CVE-2019-1651) and a high risk unauthorized access flaw (CVE-2019-1647) affecting any Cisco vSmart Controller Software versions running a release of the Cisco SD-WAN Solution prior to 18.4.0.

How One AI-Driven Media Platform Cut EBS Costs for AWS ASGs by 48%

CVE-2019-1651 could be exploited by sending a malicious file to an affected vContainer instance of the Cisco SD-WAN solution to trigger a DoS condition that could be used to execute arbitrary code as the root user.

CVE-2019-1647 can be misused by an attacker to directly connect to the exposed services, have direct unauthorized access to vSmart containers, and to retrieve and modify critical system files.

Customers can’t download and deploy software to plug those holes, as they affect only the Cisco-hosted vContainer for the Cisco SD-WAN Solution.

Latest Articles

Web Security

Weak Defences: The Most Hackable Sports Passwords

We get it. Thinking of another password that you haven’t used before can be frustrating – especially when we have to change or update our passwords so regularly. But while it might be tempting to use your favourite sports teams and clubs as passwords, it’s a risky move for your cyber security. Using unique passwords […]

7th April, 2025

Web Security

Solving Network Security Issues for Rapidly Growing Global Businesses

Introduction Ryohin Keikaku is a global manufacturing and retail company that handles everything from product planning to sales for products known as “Mujirushi-Ryohin” in Japan and “MUJI” overseas. To keep pace with its rapid expansion—adding 100 new stores annually in Japan—and its growing global presence, now spanning 225 locations across 20 countries, including 50 stores […]

3rd April, 2025

Cloud Security

Rethinking IT Security to Build Resilience for the Modern Threat Landscape

The recent two decades have changed how applications are built, delivered, and used. We used to have isolated networks with predictable entry points, but today, that has been replaced with a dynamic, interconnected web of APIs. The consequence of this is the dissolution of the traditional security perimeter. Today, protecting a single network boundary doesn’t […]

1st April, 2025

Cloud Security

Closing the Gaps in API Security: How to Build Visibility and Protection for Modern Enterprises

APIs may be your organization’s greatest enabler, but without proper context, they can become its Achilles’ heel. APIs power modern digital ecosystems, connecting applications, enabling seamless machine-to-machine communication, and driving operational efficiencies. However, as APIs become the backbone of enterprises, they also represent an expanding attack surface — one that traditional Web Application and API […]

27th February, 2025

Back to Resources

Unlock Your Cloud Potential