cisco-sa-20180905-sd-wan-escalation: Cisco SD-WAN Solution Privilege Escalation Vulnerability
First published: Wed Sep 05 2018(Updated: )
A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the error reporting application configuration. An attacker could exploit this vulnerability by sending a crafted command to the error reporting feature. A successful exploit could allow the attacker to gain root-level privileges and take full control of the device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-sd-wan-escalation
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco SD-WAN firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20180905-sd-wan-escalation?
The cisco-sa-20180905-sd-wan-escalation has been rated as a high severity vulnerability due to its potential for privilege escalation.
How can I remediate cisco-sa-20180905-sd-wan-escalation?
To fix cisco-sa-20180905-sd-wan-escalation, update the Cisco SD-WAN Solution to a version that addresses the vulnerability.
Who is affected by cisco-sa-20180905-sd-wan-escalation?
The cisco-sa-20180905-sd-wan-escalation affects all versions of the Cisco SD-WAN Solution that contain the vulnerable error reporting feature.
What type of attack does cisco-sa-20180905-sd-wan-escalation facilitate?
The cisco-sa-20180905-sd-wan-escalation vulnerability facilitates remote authenticated attackers to gain elevated privileges.
Is authentication required to exploit cisco-sa-20180905-sd-wan-escalation?
Yes, the exploitation of cisco-sa-20180905-sd-wan-escalation requires an authenticated user to perform the attack.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/title
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco sd-wan firmware