Cisco SD-WAN Software Privilege Escalation Vulnerability

Vulnerability

A privilege escalation vulnerability exists in the CLI of Cisco SD-WAN Software [1]. The affected software does not properly restrict access to privileged processes, allowing an authenticated local attacker to invoke a privileged process. The vulnerability is present in multiple releases of Cisco SD-WAN Software; specific affected versions are detailed in the Cisco Security Advisory [1].

Exploitation

To exploit this vulnerability, an attacker must have local access to the affected system and valid authentication credentials at the lowest privilege level [1]. The attacker then invokes a privileged process that is not properly restricted by the software, potentially through crafted CLI commands or direct invocation [1]. No user interaction is required beyond the initial authenticated login [1].

Impact

Successful exploitation allows the attacker to perform actions with the privileges of the root user [1]. This results in full compromise of the affected device, allowing the attacker to read, modify, or delete any file, install malicious software, or disrupt system operations [1]. The attacker gains complete control over the Cisco SD-WAN device [1].

Mitigation

Cisco has released free software updates that address this vulnerability; customers should upgrade to fixed versions as indicated in the Cisco Security Advisory [1]. No workarounds are available [1]. Fixed releases include later versions of Cisco SD-WAN Software as specified in the advisory [1].