cisco-sa-sd-wan-jOsuRJCc: Cisco SD-WAN vManage Software Cypher Query Language Injection Vulnerability
First published: Wed Sep 22 2021(Updated: )
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct cypher query language injection attacks on an affected system. This vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to the interface of an affected system. A successful exploit could allow the attacker to obtain sensitive information. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-jOsuRJCc
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco SD-WAN vManage | =20.6<20.6.1=20.5<20.5.1=20.4<20.4.2>=18.4=19.2<=20.3<20.3.4 | 20.6.1 20.5.1 20.4.2 20.3.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-sd-wan-jOsuRJCc?
The severity of cisco-sa-sd-wan-jOsuRJCc is considered high due to its potential for cypher query language injection.
How do I fix cisco-sa-sd-wan-jOsuRJCc?
To fix cisco-sa-sd-wan-jOsuRJCc, update your Cisco SD-WAN vManage Software to one of the patched versions provided by Cisco.
Which versions of Cisco SD-WAN vManage Software are affected by cisco-sa-sd-wan-jOsuRJCc?
Cisco SD-WAN vManage Software versions from 18.4 up to 20.6.1, including 20.5.1 and 20.4.2, are affected by cisco-sa-sd-wan-jOsuRJCc.
What type of attack can be conducted due to cisco-sa-sd-wan-jOsuRJCc?
cisco-sa-sd-wan-jOsuRJCc allows authenticated, remote attackers to conduct cypher query language injection attacks.
Who is impacted by the cisco-sa-sd-wan-jOsuRJCc vulnerability?
Organizations using affected versions of Cisco SD-WAN vManage Software are impacted by the cisco-sa-sd-wan-jOsuRJCc vulnerability.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/title
- agent/weakness
- agent/references
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco sd-wan vmanage
- version/cisco sd-wan vmanage/20.6
- version/cisco sd-wan vmanage/20.5
- version/cisco sd-wan vmanage/20.4
- version/cisco sd-wan vmanage/18.4
- version/cisco sd-wan vmanage/19.2
- version/cisco sd-wan vmanage/20.3