cisco-sa-sd-wan-cred-EVGSF259: Cisco IOS XE SD-WAN Software Default Credentials Vulnerability
First published: Wed Jan 22 2020(Updated: )
A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default credentials within the default configuration of an affected device. An attacker who has access to an affected device could log in with elevated privileges. A successful exploit could allow the attacker to take complete control of the device. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-cred-EVGSF259
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Standalone IOS XE SD-WAN Releases |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of Cisco SA SD-WAN Cred EVGSF259?
The severity of Cisco SA SD-WAN Cred EVGSF259 is rated as critical due to the potential for unauthorized access to affected devices.
How do I fix Cisco SA SD-WAN Cred EVGSF259?
To fix Cisco SA SD-WAN Cred EVGSF259, ensure that default credentials are changed and not left in the default state.
What does Cisco SA SD-WAN Cred EVGSF259 affect?
Cisco SA SD-WAN Cred EVGSF259 affects devices running the Cisco IOS XE SD-WAN Software.
Who can exploit Cisco SA SD-WAN Cred EVGSF259?
An unauthenticated local attacker can exploit Cisco SA SD-WAN Cred EVGSF259 to gain unauthorized access.
Is there a workaround for Cisco SA SD-WAN Cred EVGSF259?
There are no specific workarounds for Cisco SA SD-WAN Cred EVGSF259; the best practice is to change any default credentials.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/remedy
- agent/severity
- agent/title
- agent/weakness
- agent/references
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco standalone ios xe sd-wan releases