cisco-sa-clibypvman-sKcLf2L: Cisco SD-WAN vManage Software Command Injection Vulnerability
A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI. The attacker must be authenticated to access the CLI. A successful exploit could allow the attacker to execute commands with root privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clibypvman-sKcLf2L
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-clibypvman-sKcLf2L?
The severity of cisco-sa-clibypvman-sKcLf2L is considered high due to the potential for command injection with root privileges.
How do I fix cisco-sa-clibypvman-sKcLf2L?
To fix cisco-sa-clibypvman-sKcLf2L, update the Cisco SD-WAN vManage Software to a non-vulnerable version as advised by Cisco.
Who is affected by cisco-sa-clibypvman-sKcLf2L?
Cisco SD-WAN vManage Software versions 18.3, 18.4, 19.2, and 20.1.1 are affected by cisco-sa-clibypvman-sKcLf2L.
What could an attacker achieve by exploiting cisco-sa-clibypvman-sKcLf2L?
An attacker exploiting cisco-sa-clibypvman-sKcLf2L could execute arbitrary commands with root privileges.
What type of attacker can exploit cisco-sa-clibypvman-sKcLf2L?
An authenticated, local attacker can exploit cisco-sa-clibypvman-sKcLf2L due to insufficient input validation.