CVE-2023-20262: High severity cisco catalyst sd-wan manager vulnerability
A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only. This vulnerability does not prevent the system from continuing to function, and web UI access is not affected. This vulnerability is due to insufficient resource management when an affected system is in an error condition. An attacker could exploit this vulnerability by sending malicious traffic to the affected system. A successful exploit could allow the attacker to cause the SSH process to crash and restart, resulting in a DoS condition for the SSH service.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2023-20262.
What is the severity of the vulnerability?
The severity of the vulnerability is high with a severity value of 7.5.
What is the affected software?
The affected software is Cisco SD-WAN vManage versions up to 20.3.7, versions between 20.4 and 20.9.3, versions between 20.10 and 20.11.1, and version 20.12.
What does this vulnerability allow an attacker to do?
This vulnerability allows an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only.
Is web UI access affected by this vulnerability?
No, web UI access is not affected by this vulnerability.