cisco-sa-20190123-sdwan-bo: Cisco SD-WAN Solution Buffer Overflow Vulnerability
First published: Wed Jan 23 2019(Updated: )
A vulnerability in the vContainer of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to cause a denial of service (DoS) condition and execute arbitrary code as the root user. The vulnerability is due to improper bounds checking by the vContainer. An attacker could exploit this vulnerability by sending a malicious file to an affected vContainer instance. A successful exploit could allow the attacker to cause a buffer overflow condition on the affected vContainer, which could result in a DoS condition that the attacker could use to execute arbitrary code as the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-sdwan-bo
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco SD-WAN firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20190123-sdwan-bo?
The severity of cisco-sa-20190123-sdwan-bo is high, as it can lead to denial of service and arbitrary code execution.
How do I fix cisco-sa-20190123-sdwan-bo?
To fix cisco-sa-20190123-sdwan-bo, update your Cisco SD-WAN Solution to the latest firmware version provided by Cisco.
Who is affected by cisco-sa-20190123-sdwan-bo?
Users of the Cisco SD-WAN Solution are affected by cisco-sa-20190123-sdwan-bo.
What type of attack can cisco-sa-20190123-sdwan-bo facilitate?
cisco-sa-20190123-sdwan-bo can facilitate a denial of service attack and potentially allow remote code execution.
Is authentication required to exploit cisco-sa-20190123-sdwan-bo?
Yes, authentication is required to exploit the cisco-sa-20190123-sdwan-bo vulnerability.
- agent/last-modified-date
- agent/type
- agent/event
- collector/cisco-advisory
- source/Cisco
- agent/severity
- agent/title
- agent/references
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco sd-wan firmware