cisco-sa-20190123-sdwan-file-write: Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability
A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the save command in the CLI of the affected software. An attacker could exploit this vulnerability by modifying the save command in the CLI of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying operating system of an affected device and escalate their privileges to the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-sdwan-file-write
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20190123-sdwan-file-write?
The cisco-sa-20190123-sdwan-file-write vulnerability has a critical severity level due to the potential for remote file overwriting.
How do I fix cisco-sa-20190123-sdwan-file-write?
To fix cisco-sa-20190123-sdwan-file-write, update to the latest fixed version of the Cisco SD-WAN Solution as recommended in the advisory.
Who is affected by cisco-sa-20190123-sdwan-file-write?
Organizations using vulnerable versions of the Cisco SD-WAN Solution are at risk from the cisco-sa-20190123-sdwan-file-write vulnerability.
What are the potential impacts of cisco-sa-20190123-sdwan-file-write?
The cisco-sa-20190123-sdwan-file-write vulnerability could allow an authenticated attacker to overwrite arbitrary files, leading to system compromise.
How can attackers exploit cisco-sa-20190123-sdwan-file-write?
Attackers can exploit cisco-sa-20190123-sdwan-file-write by leveraging improper input validation in the save command of the command-line interface.