Cisco SD-WAN vManage Software Vulnerabilities

Vulnerability

Cisco SD-WAN vManage Software contains multiple vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code or an authenticated, local attacker to gain escalated privileges. The specific vulnerabilities are detailed in Cisco Security Advisory cisco-sa-vmanage-YuTVWqy [1]. Affected versions are listed in the advisory.

Exploitation

For the remote code execution vulnerability, an unauthenticated attacker can exploit it over the network without user interaction. For the privilege escalation vulnerability, an attacker must have local access to the system and valid credentials. The advisory does not provide specific exploitation steps.

Impact

Successful exploitation of the remote code execution vulnerability allows an attacker to execute arbitrary code on the affected system. Successful exploitation of the privilege escalation vulnerability allows an authenticated local attacker to gain elevated privileges, potentially leading to full system compromise.

Mitigation

Cisco has released free software updates to address these vulnerabilities. Customers are advised to upgrade to the fixed versions specified in the advisory [1]. No workarounds are mentioned. Customers should consult the Cisco Security Advisory for the complete list of fixed releases.