cisco-sa-sdwan-vman-sc-LRLfu2z

csafUScisco_csaf

Cisco Catalyst SD-WAN Manager Vulnerabilities

view advisory published 2023-09-27

Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an attacker to access an affected instance or cause a denial of service (DoS) condition on an affected system. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2023-20262UShigh7.5—
A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH a…
CVE-2023-20254UShigh8.8—
A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow an authenticated, remote attacker to access another tenant th…
CVE-2023-20253USmedium5.5—
A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local attacker to bypass authorization and allow the…
CVE-2023-20252UScritical9.8OT elevated—
A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticated, remote attacker to gain unauthorized…
CVE-2023-20034UShigh7.5OT elevated—
Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to access the Elasticsearch configuration d…
02

references

External citations — patches, advisories, analysis.

03

remediations (7)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan