cisco-sa-20190123-sdwan-escal: Multiple Privilege Escalation Vulnerabilities in Cisco SD-WAN Solution
First published: Wed Jan 23 2019(Updated: )
Multiple vulnerabilities in the local CLI of the Cisco SD-WAN Solution could allow an authenticated, local attacker to escalate privileges and modify device configuration files. The vulnerabilities exist because user input is not properly sanitized for certain commands at the CLI. An attacker could exploit these vulnerabilities by sending crafted commands to the CLI of an affected device. A successful exploit could allow the attacker to establish an interactive session with elevated privileges. The attacker could then use the elevated privileges to further compromise the device or obtain additional configuration data from the device. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-sdwan-escal
Credit: These vulnerabilities were found during internal security testing.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco SD-WAN firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20190123-sdwan-escal?
The severity of cisco-sa-20190123-sdwan-escal is considered high due to the potential for privilege escalation.
How do I fix cisco-sa-20190123-sdwan-escal?
To fix cisco-sa-20190123-sdwan-escal, apply the latest security patches provided by Cisco for the SD-WAN Solution.
Who is affected by cisco-sa-20190123-sdwan-escal?
Users of the Cisco SD-WAN Solution are affected by cisco-sa-20190123-sdwan-escal due to vulnerabilities in the local CLI.
What types of attacks can occur due to cisco-sa-20190123-sdwan-escal?
cisco-sa-20190123-sdwan-escal could allow authenticated local attackers to escalate privileges and modify device configuration files.
Is user input validation a problem in cisco-sa-20190123-sdwan-escal?
Yes, user input is not properly sanitized, leading to vulnerabilities in the local CLI of the Cisco SD-WAN Solution.
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/author
- agent/severity
- agent/title
- agent/references
- agent/weakness
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco sd-wan firmware