Cisco Catalyst SD-WAN Manager

Cisco SD-WAN Solution Improper Access Control Vulnerability

Cisco SD-WAN vManage Privilege Escalation Vulnerability

Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability

A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.

Cisco SD-WAN vManage Directory Traversal Vulnerability

Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only. This vulnerability does not prevent the system from continuing to function, and web UI access is not affected. This vulnerability is due to insufficient resource management when an affected system is in an error condition. An attacker could exploit this vulnerability by sending malicious traffic to the affected system. A successful exploit could allow the attacker to cause the SSH process to crash and restart, resulting in a DoS condition for the SSH service.

A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local attacker to bypass authorization and allow the attacker to roll back the configuration on vManage controllers and edge router device. This vulnerability is due to improper access control in the cli-management interface of an affected system. An attacker with low-privilege (read only) access to the cli could exploit this vulnerability by sending a request to roll back the configuration on for other controller and devices managed by an affected system. A successful exploit could allow the attacker to to roll back the configuration on for other controller and devices managed by an affected system.

Cisco SD-WAN Software Arbitrary File Corruption Vulnerability

Cisco SD-WAN vManage Software Privilege Escalation Vulnerability

Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain read access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to an affected system. A successful exploit could allow the attacker to view arbitrary files on the affected system.

Cisco SD-WAN vManage Software Information Disclosure Vulnerability

Cisco SD-WAN Manager Software Arbitrary File Creation Vulnerability

Cisco SD-WAN vManage Command Injection Vulnerability

Cisco SD-WAN vManage Information Disclosure Vulnerability

Cisco SD-WAN vManage Software Information Disclosure Vulnerability

Cisco SD-WAN vManage Software Authorization Bypass Vulnerability

Cisco SD-WAN vManage Software Cypher Query Language Injection Vulnerability

Cisco SD-WAN vManage Software XML External Entity Vulnerability

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affected system. This vulnerability is due to improper validation of parameters that are sent to the web UI. An attacker could exploit this vulnerability by logging in to Cisco Catalyst SD-WAN Manager and issuing crafted requests using the web UI. A successful exploit could allow the attacker to obtain arbitrary files from the underlying Linux file system of an affected system. To exploit this vulnerability, the attacker must be an authenticated user.

Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability

Cisco SD-WAN vManage Software XML External Entity Vulnerability

Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability

Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability

Cisco SD-WAN vManage Authorization Bypass Vulnerability

Cisco SD-WAN vManage Cross-Site Scripting Vulnerability

Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability

A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files. This vulnerability is due to improper filtering of directory traversal character sequences within system commands. An attacker with administrative privileges could exploit this vulnerability by running a system command containing directory traversal character sequences to target an arbitrary file. A successful exploit could allow the attacker to delete arbitrary files from the system, including files owned by root.

Cisco SD-WAN Software Arbitrary File Corruption Vulnerability

Cisco Catalyst vManage Certificate Validation Vulnerability

Cisco SD-WAN vManage Software Information Disclosure Vulnerability

Cisco SD-WAN Software Information Disclosure Vulnerability

Cisco Catalyst SDWAN Manager Arbitrary File Overwrite Vulnerability

Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability

Cisco SD-WAN vDaemon Buffer Overflow Vulnerability

Cisco SD-WAN vManage Stored Cross-Site Scripting Vulnerability

Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability

Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of the web-based management interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.