cisco-sa-clibypvman-sKcLf2L: Cisco SD-WAN vManage Software Command Injection Vulnerability
First published: Wed Jul 15 2020(Updated: )
A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI. The attacker must be authenticated to access the CLI. A successful exploit could allow the attacker to execute commands with root privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clibypvman-sKcLf2L
Credit: Orange CERT/CC.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco SD-WAN vManage | >=19.3<=20.1<20.1.1=19.2<19.2.2>=.3<18=18.3<=18.4<18.4.5 | 20.1.1 19.2.2 18.4.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-clibypvman-sKcLf2L?
The severity of cisco-sa-clibypvman-sKcLf2L is considered high due to the potential for command injection with root privileges.
How do I fix cisco-sa-clibypvman-sKcLf2L?
To fix cisco-sa-clibypvman-sKcLf2L, update the Cisco SD-WAN vManage Software to a non-vulnerable version as advised by Cisco.
Who is affected by cisco-sa-clibypvman-sKcLf2L?
Cisco SD-WAN vManage Software versions 18.3, 18.4, 19.2, and 20.1.1 are affected by cisco-sa-clibypvman-sKcLf2L.
What could an attacker achieve by exploiting cisco-sa-clibypvman-sKcLf2L?
An attacker exploiting cisco-sa-clibypvman-sKcLf2L could execute arbitrary commands with root privileges.
What type of attacker can exploit cisco-sa-clibypvman-sKcLf2L?
An authenticated, local attacker can exploit cisco-sa-clibypvman-sKcLf2L due to insufficient input validation.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/author
- agent/weakness
- agent/references
- agent/severity
- agent/title
- agent/description
- agent/event
- agent/softwarecombine
- agent/source
- agent/tags
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco sd-wan vmanage
- version/cisco sd-wan vmanage/19.3
- version/cisco sd-wan vmanage/20.1
- version/cisco sd-wan vmanage/19.2
- version/cisco sd-wan vmanage/.3
- version/cisco sd-wan vmanage/18.3
- version/cisco sd-wan vmanage/18.4