cisco-sa-sdwan-arbfile-7Qhd9mCn: Cisco SD-WAN Software Arbitrary File Corruption Vulnerability
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system. This vulnerability is due to insufficient validation of the user-supplied input parameters of a specific CLI command. An attacker could exploit this vulnerability by issuing that command with specific parameters. A successful exploit could allow the attacker to overwrite the content in any arbitrary files that reside on the underlying host file system. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfile-7Qhd9mCn
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-sdwan-arbfile-7Qhd9mCn?
The severity of cisco-sa-sdwan-arbfile-7Qhd9mCn is rated as high due to its potential to allow local authenticated attackers to overwrite arbitrary files.
How do I fix cisco-sa-sdwan-arbfile-7Qhd9mCn?
To fix cisco-sa-sdwan-arbfile-7Qhd9mCn, upgrading to the latest version of Cisco SD-WAN Software is recommended.
What affected versions are susceptible to cisco-sa-sdwan-arbfile-7Qhd9mCn?
Affected versions of Cisco SD-WAN Software include 18.4.6 and prior, 19.2.3 and prior, 20.1.2 and prior, 20.3.1 and prior, 20.4.1 and prior, and 20.5.1 and prior.
Is cisco-sa-sdwan-arbfile-7Qhd9mCn remotely exploitable?
No, cisco-sa-sdwan-arbfile-7Qhd9mCn requires local authentication for exploitation.
Who is impacted by cisco-sa-sdwan-arbfile-7Qhd9mCn?
Organizations using the affected versions of Cisco SD-WAN Software are at risk due to this vulnerability.