cisco-sa-sdwan-esc-rSNVvTf9: Cisco IOS XE SD-WAN Software Console Privilege Escalation Vulnerability
First published: Wed Mar 24 2021(Updated: )
A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker with read-only privileges to obtain administrative privileges by using the console port when the device is in the default SD-WAN configuration. This vulnerability occurs because the default configuration is applied for console authentication and authorization. An attacker could exploit this vulnerability by connecting to the console port and authenticating as a read-only user. A successful exploit could allow a user with read-only permissions to access administrative privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Standalone IOS XE SD-WAN Releases |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-sdwan-esc-rSNVvTf9?
The cisco-sa-sdwan-esc-rSNVvTf9 vulnerability is rated as high severity due to the potential for privilege escalation.
How do I fix cisco-sa-sdwan-esc-rSNVvTf9?
To fix cisco-sa-sdwan-esc-rSNVvTf9, apply the recommended patch or upgrade provided by Cisco for the affected IOS XE SD-WAN Software.
Who is affected by cisco-sa-sdwan-esc-rSNVvTf9?
The cisco-sa-sdwan-esc-rSNVvTf9 vulnerability affects users of the Cisco IOS XE SD-WAN Software that are configured with default settings.
What type of attack does cisco-sa-sdwan-esc-rSNVvTf9 allow?
The cisco-sa-sdwan-esc-rSNVvTf9 vulnerability allows an authenticated, local attacker with read-only access to escalate privileges to administrative access.
When was cisco-sa-sdwan-esc-rSNVvTf9 disclosed?
The cisco-sa-sdwan-esc-rSNVvTf9 vulnerability was disclosed in a Cisco security advisory detailing its implications for affected devices.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/severity
- agent/weakness
- agent/references
- agent/title
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco standalone ios xe sd-wan releases