Original Issue Date: May 21, 2021
Severity Rating: HIGH
Software Affected
- IOS XE SD-WAN Software
- SD-WAN cEdge Routers
- SD-WAN vBond Orchestrator Software
- SD-WAN vEdge Routers
- SD-WAN vSmart Controller Software
Overview
Multiple vulnerabilities have been reported in Cisco SD-WAN vManage Software which could be exploited by a remote attacker to execute arbitrary code or gain access to sensitive information to the affected system.
Description
These vulnerabilities exist in Cisco SD-WAN vManage software due to improper access Control. A remote attacker could exploit these vulnerabilities to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application.
Successful exploitation of these vulnerabilities could allow the attacker to bypass implemented security restrictions and gain unauthorized access to the affected system.
Solution
Apply appropriate patches as mentioned in vendor’s website.
CISCO
Disclaimer
The information provided herein is on “as is” basis, without warranty of any kind.