CVE-2018-0349
Description
A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the request admin-tech command in the CLI of the affected software. An attacker could exploit this vulnerability by modifying the request admin-tech command in the CLI of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying operating system of an affected device and escalate their privileges to the root user. This vulnerability affects the following Cisco products if they are running a release of the Cisco SD-WAN Solution prior to Release 18.3.0: vBond Orchestrator Software, vEdge 100 Series Routers, vEdge 1000 Series Routers, vEdge 2000 Series Routers, vEdge 5000 Series Routers, vEdge Cloud Router Platform, vManage Network Management Software, vSmart Controller Software. Cisco Bug IDs: CSCvi69852, CSCvi69856.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Cisco SD-WAN Solution prior to 18.3.0 allows authenticated remote attackers to overwrite arbitrary files and escalate to root via improper input validation in the CLI 'request admin-tech' command.
Vulnerability
The vulnerability resides in the CLI command request admin-tech of the Cisco SD-WAN Solution. Improper input validation allows an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system. This affects the following products running a release prior to 18.3.0: vBond Orchestrator Software, vEdge 100/1000/2000/5000 Series Routers, vEdge Cloud Router Platform, vManage Network Management Software, and vSmart Controller Software [1].
Exploitation
An attacker must have valid credentials to access the CLI of an affected device. No additional user interaction is required. The attacker modifies the request admin-tech command with crafted input that bypasses validation, causing the device to overwrite arbitrary files [1].
Impact
Successful exploitation allows the attacker to overwrite arbitrary files on the underlying operating system, potentially leading to denial of service or system compromise. Additionally, the attacker can escalate privileges to the root user, gaining full control of the device [1].
Mitigation
Cisco released fixed software in Release 18.3.0 of the Cisco SD-WAN Solution. Customers should upgrade to this or a later release. No workarounds are available. The vulnerability is not listed in the Known Exploited Vulnerabilities (KEV) catalog as of the publication date [1].
AI Insight generated on May 25, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
1- Range: <18.3.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securityfocus.com/bid/104854mitrevdb-entryx_refsource_BID
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-sdwan-fomitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.