Cisco Catalyst SD-WAN peering flaw bypasses authentication for admin access
Original title: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
An unauthenticated remote attacker can send crafted requests and log in with administrative privileges.
Cisco says a peering-authentication flaw in Catalyst SD-WAN Controller, Manager, and Validator can let an unauthenticated remote attacker bypass authentication and obtain administrative privileges. The products were formerly SD-WAN vSmart, vManage, and vBond. The advisory snippet does not name a CVE, affected versions, a fix, or known attacks.
Unconfirmed: The feed snippet is cut off and does not state a CVE, versions, a fix, or exploitation.
- The peering authentication mechanism is not working properly.
- Exploitation is described as sending crafted requests to an affected system.
- A successful exploit lets the attacker log in as an internal account.
Impact: Unauthenticated remote login with administrative privileges
| Product | Affected |
|---|---|
| Cisco Catalyst SD-WAN Controller | — |
| Cisco Catalyst SD-WAN Manager | — |
| Cisco Catalyst SD-WAN Validator | — |
- Vendors
- Cisco
From the original article
A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.
sec.cloudapps.cisco.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.