PT-2023-5581 · Cisco · Cisco Sd-Wan Vmanage

Published

2023-09-27

·

Updated

2024-01-25

·

CVE-2023-20253

CVSS v3.1

7.1

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions Cisco SD-WAN vManage (affected versions not specified)
Description A vulnerability in the command line interface (CLI) management interface of Cisco SD-WAN vManage could allow an authenticated, local attacker to bypass authorization and roll back the configuration on vManage controllers and edge router devices. This issue is due to improper access control in the CLI management interface, allowing an attacker with low-privilege (read-only) access to exploit the vulnerability by sending a request to roll back the configuration on other controllers and devices managed by an affected system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284CWE-286CWE-266

Related Identifiers

BDU:2023-06232
CVE-2023-20253

Affected Products

Cisco Sd-Wan Vmanage