cisco-sa-sdwan-avc-NddSGB8: Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability
A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthenticated, remote attacker to access the GUI of Cisco SD-AVC without authentication. This vulnerability exists because the GUI is accessible on self-managed cloud installations or local server installations of Cisco vManage. An attacker could exploit this vulnerability by accessing the exposed GUI of Cisco SD-AVC. A successful exploit could allow the attacker to view managed device names, SD-AVC logs, and SD-AVC DNS server IP addresses. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-avc-NddSGB8
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-sdwan-avc-NddSGB8?
The severity of the vulnerability cisco-sa-sdwan-avc-NddSGB8 is classified as high due to the potential for unauthenticated remote access.
How do I fix cisco-sa-sdwan-avc-NddSGB8?
To remediate the vulnerability cisco-sa-sdwan-avc-NddSGB8, upgrade to a fixed version of Cisco vManage as specified in the advisory.
Which versions of Cisco vManage are affected by cisco-sa-sdwan-avc-NddSGB8?
Versions of Cisco vManage including 18.3 and earlier, 20.4, 20.5, 20.6, and some specific 20.3 versions are affected by cisco-sa-sdwan-avc-NddSGB8.
Can cisco-sa-sdwan-avc-NddSGB8 be exploited remotely?
Yes, cisco-sa-sdwan-avc-NddSGB8 can be exploited remotely by an unauthenticated attacker to gain access to the GUI.
Is authentication required to exploit cisco-sa-sdwan-avc-NddSGB8?
No, authentication is not required to exploit the cisco-sa-sdwan-avc-NddSGB8 vulnerability as it allows unauthorized access.