cisco-sa-sdwan-lfi-OWLbKUGe: Cisco Catalyst SD-WAN Manager Local File Inclusion Vulnerability
Published Oct 18, 2023
·Updated
A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affected system.This vulnerability is due to improper validation of parameters that are sent to the web UI. An attacker could exploit this
Affected Software
1 affected component
cisco Catalyst SD-WAN Manager
Event History
Oct 18, 2023
Advisory Published
04:00 PM
Data Sourced
04:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of cisco-sa-sdwan-lfi-OWLbKUGe?
The severity of cisco-sa-sdwan-lfi-OWLbKUGe is classified as high.
2
How do I fix cisco-sa-sdwan-lfi-OWLbKUGe?
To fix cisco-sa-sdwan-lfi-OWLbKUGe, update your Cisco Catalyst SD-WAN Manager to the latest patched version.
3
What products are affected by cisco-sa-sdwan-lfi-OWLbKUGe?
The affected product for cisco-sa-sdwan-lfi-OWLbKUGe is Cisco Catalyst SD-WAN Manager.
4
Can cisco-sa-sdwan-lfi-OWLbKUGe be exploited remotely?
Yes, cisco-sa-sdwan-lfi-OWLbKUGe can be exploited by an authenticated remote attacker.
5
What type of attack is associated with cisco-sa-sdwan-lfi-OWLbKUGe?
cisco-sa-sdwan-lfi-OWLbKUGe is associated with local file inclusion attacks.