Description
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overwrite arbitrary files on an affected device, which could result in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation for specific commands. An attacker could exploit this vulnerability by including crafted arguments to those specific commands. A successful exploit could allow the attacker to create or overwrite arbitrary files on the affected device, which could result in a DoS condition.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Metrics
CVSS 3.1 8.4/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Catalyst SD-WAN Manager | 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; 19.3.0; 19.2.2; 19.2.099; 18.3.6; 18.3.7; 19.2.0; 18.3.8; 19.0.0; 19.1.0; 18.4.302; 18.4.303; 19.2.097; 19.2.098; 17.2.10 |
| Cisco | Cisco SD-WAN vContainer | 18.4.5; 20.1.12; 18.3.6; 19.2.1; 19.3.0; 20.1.1; 19.2.2; 18.3.8; 18.4.3; 18.4.4; 18.4.302; 19.1.0; 18.4.303; 19.2.0; 19.2.098; 17.2.10; 18.3.7; 18.3.1; 19.2.099; 19.2.097 |
| Cisco | Cisco SD-WAN vEdge Cloud | 19.2.1; 20.1.12; 18.4.4; 19.3.0; 18.3.8; 19.2.2; 20.1.1; 18.3.6; 18.4.3; 18.4.302; 18.4.5; 18.4.303; 19.2.098; 19.1.0; 17.2.10; 19.0.1a; 19.2.099; 18.3.7; 19.2.097; 18.3.1 |
| Cisco | Cisco SD-WAN vEdge Router | 18.4.303; 18.3.7; 19.3.0; 18.2.0; 20.1.12; 19.2.099; 17.2.10; 18.3.3; 18.3.6; 19.0.0; 17.2.6; 18.4.0; 19.1.01; 19.2.098; 18.3.1; 18.4.302; 19.2.2; 18.3.5; 17.2.9; 19.1.0 |
References
Timeline
- Published
- Nov 18, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed