cisco-sa-vmanage-file-Y2JSRNRb: Cisco SD-WAN vManage Software Arbitrary File Creation Vulnerability
A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to write arbitrary files to an affected system. The vulnerability is due to improper validation of requests to APIs. An attacker could exploit this vulnerability by sending malicious requests to an API within the affected application. A successful exploit could allow the attacker to conduct directory traversal attacks and write files to an arbitrary location on the targeted system. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-file-Y2JSRNRb
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-vmanage-file-Y2JSRNRb?
The cisco-sa-vmanage-file-Y2JSRNRb vulnerability is rated as high severity due to its potential for unauthorized file writing.
How do I fix cisco-sa-vmanage-file-Y2JSRNRb?
To fix cisco-sa-vmanage-file-Y2JSRNRb, apply the necessary patches or updates provided by Cisco for the SD-WAN vManage Software.
Who is affected by cisco-sa-vmanage-file-Y2JSRNRb?
The cisco-sa-vmanage-file-Y2JSRNRb vulnerability affects users of Cisco SD-WAN vManage Software.
What could an attacker do by exploiting cisco-sa-vmanage-file-Y2JSRNRb?
An attacker exploiting cisco-sa-vmanage-file-Y2JSRNRb could write arbitrary files to the affected Cisco SD-WAN vManage system.
What causes the cisco-sa-vmanage-file-Y2JSRNRb vulnerability?
The cisco-sa-vmanage-file-Y2JSRNRb vulnerability is caused by improper validation of requests to APIs in the Cisco SD-WAN vManage Software.