CVE-2018-0345

Vulnerability

An authenticated, remote attacker can execute arbitrary commands with the privileges of the vmanage user in the configuration management system of the Cisco SD-WAN Solution. The vulnerability is due to insufficient validation of command arguments passed to the configuration and management database (CSCvi69937). Affected products running a release prior to Release 18.3.0 include: vBond Orchestrator Software, vManage Network Management Software, and vSmart Controller Software [1].

Exploitation

An attacker must have valid authentication credentials for the configuration and management database. The attacker creates custom functions containing malicious code, which are then executed as the vmanage user [1]. No additional user interaction or race condition is required beyond the authenticated session.

Impact

Successful exploitation allows the attacker to execute arbitrary commands with the privileges of the vmanage user within the configuration management system, leading to full compromise of the affected component's administrative capabilities [1].

Mitigation

Cisco has released free software updates; the vulnerability is fixed in Cisco SD-WAN Solution Release 18.3.0 and later [1]. Customers should upgrade to a fixed release and consult the Cisco Security Advisory for additional guidance [1].