Cisco Catalyst SD-WAN Manager Vulnerabilities

2023-09-2716:00:00

tools.cisco.com

cisco

catalyst

sd-wan

manager

vulnerabilities

access

dos

software update

advisory

EPSS

0.002

Percentile

60.5%

JSON

Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an attacker to access an affected instance or cause a denial of service (DoS) condition on an affected system.

For more information about these vulnerabilities, see the Details [“#details”] section of this advisory.

Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-sc-LRLfu2z [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-sc-LRLfu2z”]

Affected configurations

Vulners

Node

ciscosd-wan_solutionMatchany

ciscosd-wan_vmanageMatchany

ciscosd-wan_vsmart_controllerMatchany

ciscosd-wan_solutionMatchany

ciscosd-wan_vmanageMatchany

ciscosd-wan_vsmart_controllerMatchany

VendorProductVersionCPE
ciscosd-wan_solutionanycpe:2.3:a:cisco:sd-wan_solution:any:*:*:*:*:*:*:*
ciscosd-wan_vmanageanycpe:2.3:a:cisco:sd-wan_vmanage:any:*:*:*:*:*:*:*
ciscosd-wan_vsmart_controlleranycpe:2.3:a:cisco:sd-wan_vsmart_controller:any:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	sd-wan_solution	any	cpe:2.3:a:cisco:sd-wan_solution:any:::::::*
cisco	sd-wan_vmanage	any	cpe:2.3:a:cisco:sd-wan_vmanage:any:::::::*
cisco	sd-wan_vsmart_controller	any	cpe:2.3:a:cisco:sd-wan_vsmart_controller:any:::::::*