cisco-sa-xesdwpinj-V4weeqzU: Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities
Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges. These vulnerabilities are due to insufficient input validation of certain CLI commands. An attacker could exploit these vulnerabilities by authenticating to the device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to access the underlying operating system with root privileges. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xesdwpinj-V4weeqzU
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-xesdwpinj-V4weeqzU?
The severity of cisco-sa-xesdwpinj-V4weeqzU is classified as high due to the potential for local authenticated attackers to gain root access.
How do I fix cisco-sa-xesdwpinj-V4weeqzU?
To fix cisco-sa-xesdwpinj-V4weeqzU, update to the latest patched version of Cisco IOS XE SD-WAN Software.
Who is affected by cisco-sa-xesdwpinj-V4weeqzU?
Cisco IOS XE SD-WAN Software users are affected by the vulnerabilities outlined in cisco-sa-xesdwpinj-V4weeqzU.
What type of attacks can exploit cisco-sa-xesdwpinj-V4weeqzU?
Authenticated local attacks that exploit insufficient input validation of CLI commands can leverage cisco-sa-xesdwpinj-V4weeqzU.
What should I do if I cannot patch cisco-sa-xesdwpinj-V4weeqzU immediately?
If immediate patching for cisco-sa-xesdwpinj-V4weeqzU is not possible, consider restricting local access to affected devices until a fix can be applied.