cisco-sa-sd-wan-fuErCWwF: Cisco SD-WAN Software Privilege Escalation Vulnerability

Published Jun 2, 2021
·
Updated

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected system. This vulnerability exists because the affected software does not properly restrict access to privileged processes. An attacker could exploit this vulnerability by invoking a privileged process in the affected system. A successful exploit could allow the attacker to perform actions with the privileges of the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-fuErCWwF

Credit

Julien Legras(Synacktiv)

Affected Software

1 affected componentFixes available
Cisco SD-WAN Software=20.5, <20.5.1, =20.4, <20.4.2
20.5.120.4.2

Event History

Jun 2, 2021
Advisory Published
via Cisco·04:00 PM

Child vulnerabilities

Contains the following vulnerabilities.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of cisco-sa-sd-wan-fuErCWwF?

The severity of cisco-sa-sd-wan-fuErCWwF is classified as high due to the potential for an authenticated attacker to gain elevated privileges.

2

How can I fix cisco-sa-sd-wan-fuErCWwF?

To fix cisco-sa-sd-wan-fuErCWwF, upgrade to the latest fixed version of Cisco SD-WAN Software as recommended in the advisory.

3

Which versions of Cisco SD-WAN Software are affected by cisco-sa-sd-wan-fuErCWwF?

Cisco SD-WAN Software versions 20.4 and 20.5 are affected by cisco-sa-sd-wan-fuErCWwF up to 20.4.2 and 20.5.1 respectively.

4

Who can exploit the vulnerability identified by cisco-sa-sd-wan-fuErCWwF?

The vulnerability in cisco-sa-sd-wan-fuErCWwF can be exploited by an authenticated, local attacker.

5

What consequences can arise from the exploitation of cisco-sa-sd-wan-fuErCWwF?

Exploitation of cisco-sa-sd-wan-fuErCWwF can lead to elevated privileges on the affected system, potentially allowing attackers to execute unauthorized commands.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203