| Package | Affected versions | Patched versions |
|---|---|---|
| sd-wan orchestrator | = 3.3.2≥ 3.4.0, ≤ 3.4.4≥ 4.0.0, ≤ 4.0.1 |
The SD-WAN Orchestrator 3.3.2, 3.4.x, and 4.0.x has default passwords allowing for a Pass-the-Hash Attack. SD-WAN Orchestrator ships with default passwords for predefined accounts which may lead to to a Pass-the-Hash attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free