cisco-sa-vmanage-file-Y2JSRNRb: Cisco SD-WAN vManage Software Arbitrary File Creation Vulnerability
First published: Wed Nov 04 2020(Updated: )
A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to write arbitrary files to an affected system. The vulnerability is due to improper validation of requests to APIs. An attacker could exploit this vulnerability by sending malicious requests to an API within the affected application. A successful exploit could allow the attacker to conduct directory traversal attacks and write files to an arbitrary location on the targeted system. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-file-Y2JSRNRb
Credit: Yaar Hahn Realmode Labs
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco SD-WAN vManage |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-vmanage-file-Y2JSRNRb?
The cisco-sa-vmanage-file-Y2JSRNRb vulnerability is rated as high severity due to its potential for unauthorized file writing.
How do I fix cisco-sa-vmanage-file-Y2JSRNRb?
To fix cisco-sa-vmanage-file-Y2JSRNRb, apply the necessary patches or updates provided by Cisco for the SD-WAN vManage Software.
Who is affected by cisco-sa-vmanage-file-Y2JSRNRb?
The cisco-sa-vmanage-file-Y2JSRNRb vulnerability affects users of Cisco SD-WAN vManage Software.
What could an attacker do by exploiting cisco-sa-vmanage-file-Y2JSRNRb?
An attacker exploiting cisco-sa-vmanage-file-Y2JSRNRb could write arbitrary files to the affected Cisco SD-WAN vManage system.
What causes the cisco-sa-vmanage-file-Y2JSRNRb vulnerability?
The cisco-sa-vmanage-file-Y2JSRNRb vulnerability is caused by improper validation of requests to APIs in the Cisco SD-WAN vManage Software.
- agent/type
- agent/event
- collector/cisco-advisory
- source/Cisco
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/severity
- agent/title
- agent/description
- agent/first-publish-date
- agent/author
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco sd-wan vmanage