CVE-2026-20133HighCVSS: 6.5

Cisco Catalyst SD-WAN Manager: Informationsoffenlegung durch API-Schwachstelle

Eine Schwachstelle in Cisco Catalyst SD-WAN Manager ermöglicht nicht authentifizierten, entfernten Angreifern das Auslesen sensibler Informationen des zugrunde liegenden Betriebssystems. Der Fehler liegt in unzureichenden Dateisystemzugriffsbeschränkungen in der API-Schnittstelle. Cisco hat Sicherheitsupdates veröffentlicht, ein Workaround ist nicht verfügbar.

METADATEN

Entdeckt:: 25.02.2026
Patch verfügbar:: Ja

BETROFFENE SYSTEME

•Cisco Catalyst SD-WAN Manager 20.6.5.1.7
•Cisco Catalyst SD-WAN Manager 20.11.1_LI_Images
•Cisco Catalyst SD-WAN Manager 20.9.3.2_LI_Images
•Cisco Catalyst SD-WAN Manager 20.6.5.4
•Cisco Catalyst SD-WAN Manager 17.2.6
•Cisco Catalyst SD-WAN Manager 20.6.3.0.40
•Cisco Catalyst SD-WAN Manager 18.4.302
•Cisco Catalyst SD-WAN Manager 20.9.5.2.7
•Cisco Catalyst SD-WAN Manager 20.3.4.0.1
•Cisco Catalyst SD-WAN Manager 20.12.2_LI_Images
•Cisco Catalyst SD-WAN Manager 20.3.2.1
•Cisco Catalyst SD-WAN Manager 20.3.4.0.6
•Cisco Catalyst SD-WAN Manager 20.4.1.0.02
•Cisco Catalyst SD-WAN Manager 20.6.5.1.10
•Cisco Catalyst SD-WAN Manager 20.9.1_LI_Images
•Cisco Catalyst SD-WAN Manager 19.2.32
•Cisco Catalyst SD-WAN Manager 20.9.3.0.25
•Cisco Catalyst SD-WAN Manager 20.5.1.0.1
•Cisco Catalyst SD-WAN Manager 20.6.5.1.11
•Cisco Catalyst SD-WAN Manager 20.7.1.1
•Cisco Catalyst SD-WAN Manager 20.9.3.0.5
•Cisco Catalyst SD-WAN Manager 20.9.5.2
•Cisco Catalyst SD-WAN Manager 20.16.1
•Cisco Catalyst SD-WAN Manager 20.9.3.0.23
•Cisco Catalyst SD-WAN Manager 20.3.3.1.7
•Cisco Catalyst SD-WAN Manager 20.6.0.18.4
•Cisco Catalyst SD-WAN Manager 20.3.3.1.5
•Cisco Catalyst SD-WAN Manager 20.3.3.0.4
•Cisco Catalyst SD-WAN Manager 20.3.4.0.11
•Cisco Catalyst SD-WAN Manager 18.3.7
•Cisco Catalyst SD-WAN Manager 20.15.1
•Cisco Catalyst SD-WAN Manager 20.12.4_Monthly_ES5
•Cisco Catalyst SD-WAN Manager 20.12.4.1
•Cisco Catalyst SD-WAN Manager 20.4.1.0.1
•Cisco Catalyst SD-WAN Manager 20.1.2_937
•Cisco Catalyst SD-WAN Manager 20.3.2
•Cisco Catalyst SD-WAN Manager 20.6.3.0.47
•Cisco Catalyst SD-WAN Manager 20.3.814
•Cisco Catalyst SD-WAN Manager 20.3.813
•Cisco Catalyst SD-WAN Manager 20.3.4.1.2
•Cisco Catalyst SD-WAN Manager 20.12.3
•Cisco Catalyst SD-WAN Manager 20.4.2.1.1
•Cisco Catalyst SD-WAN Manager 20.6.3.0.29
•Cisco Catalyst SD-WAN Manager 20.9.3
•Cisco Catalyst SD-WAN Manager 20.3.5
•Cisco Catalyst SD-WAN Manager 20.6.4
•Cisco Catalyst SD-WAN Manager 19.2.2
•Cisco Catalyst SD-WAN Manager 20.9.3.0.20
•Cisco Catalyst SD-WAN Manager 18.4.6
•Cisco Catalyst SD-WAN Manager 20.3.5.1
•Cisco Catalyst SD-WAN Manager 19.2.1
•Cisco Catalyst SD-WAN Manager 20.9.2
•Cisco Catalyst SD-WAN Manager 20.6.2.2
•Cisco Catalyst SD-WAN Manager 20.6.3.0.7
•Cisco Catalyst SD-WAN Manager 20.9.3.0.26
•Cisco Catalyst SD-WAN Manager 20.12.4.1_LI_Images
•Cisco Catalyst SD-WAN Manager 20.4.1
•Cisco Catalyst SD-WAN Manager 20.3.1
•Cisco Catalyst SD-WAN Manager 20.6.5.2.4
•Cisco Catalyst SD-WAN Manager 20.15.4
•Cisco Catalyst SD-WAN Manager 20.9.4.1
•Cisco Catalyst SD-WAN Manager 20.6.4.0.4
•Cisco Catalyst SD-WAN Manager 20.12.5.1
•Cisco Catalyst SD-WAN Manager 20.6.5.2.8
•Cisco Catalyst SD-WAN Manager 19.0.0
•Cisco Catalyst SD-WAN Manager 20.3.3.2
•Cisco Catalyst SD-WAN Manager 20.3.2.0.6
•Cisco Catalyst SD-WAN Manager 20.6.3.0.38
•Cisco Catalyst SD-WAN Manager 20.6.2.2.3
•Cisco Catalyst SD-WAN Manager 20.6.2.2.7
•Cisco Catalyst SD-WAN Manager 20.3.7
•Cisco Catalyst SD-WAN Manager 20.4.2.0.2
•Cisco Catalyst SD-WAN Manager 20.4.2.1
•Cisco Catalyst SD-WAN Manager 19.1.0
•Cisco Catalyst SD-WAN Manager 20.3.4.2.1
•Cisco Catalyst SD-WAN Manager 20.9.3.0.8
•Cisco Catalyst SD-WAN Manager 20.6.1.0.1
•Cisco Catalyst SD-WAN Manager 20.9.3.0.29
•Cisco Catalyst SD-WAN Manager 20.9.2.2
•Cisco Catalyst SD-WAN Manager 20.10.1.2
•Cisco Catalyst SD-WAN Manager 20.9.2.1
•Cisco Catalyst SD-WAN Manager 20.9.5.2_LI_Images
•Cisco Catalyst SD-WAN Manager 17.2.10
•Cisco Catalyst SD-WAN Manager 20.6.5.1.5
•Cisco Catalyst SD-WAN Manager 20.6.3.0.51
•Cisco Catalyst SD-WAN Manager 20.7.1EFT2
•Cisco Catalyst SD-WAN Manager 20.9.5.2.13
•Cisco Catalyst SD-WAN Manager 20.9.7.1
•Cisco Catalyst SD-WAN Manager 20.6.3.0.18
•Cisco Catalyst SD-WAN Manager 20.3.3.1.2
•Cisco Catalyst SD-WAN Manager 20.12.5.1.01
•Cisco Catalyst SD-WAN Manager 19.2.31
•Cisco Catalyst SD-WAN Manager 20.12.3.1
•Cisco Catalyst SD-WAN Manager 20.9.3.0.7
•Cisco Catalyst SD-WAN Manager 20.3.4.1.1
•Cisco Catalyst SD-WAN Manager 20.15.3_ LI _Images
•Cisco Catalyst SD-WAN Manager 20.12.4.0.4
•Cisco Catalyst SD-WAN Manager 20.6.5.1.9
•Cisco Catalyst SD-WAN Manager 18.3.3
•Cisco Catalyst SD-WAN Manager 20.3.4.2
•Cisco Catalyst SD-WAN Manager 19.0.1a
•Cisco Catalyst SD-WAN Manager 20.9.5.2.14
•Cisco Catalyst SD-WAN Manager 20.6.3.2
•Cisco Catalyst SD-WAN Manager 20.3.4
•Cisco Catalyst SD-WAN Manager 20.9.7
•Cisco Catalyst SD-WAN Manager 19.2.099
•Cisco Catalyst SD-WAN Manager 20.6.3.0.14
•Cisco Catalyst SD-WAN Manager 20.6.5.1.6
•Cisco Catalyst SD-WAN Manager 20.5.1
•Cisco Catalyst SD-WAN Manager 18.3.0
•Cisco Catalyst SD-WAN Manager 20.6.5.2.3
•Cisco Catalyst SD-WAN Manager 20.4.2.2.8
•Cisco Catalyst SD-WAN Manager 20.9.3.0.16
•Cisco Catalyst SD-WAN Manager 20.9.4.1.3
•Cisco Catalyst SD-WAN Manager 20.9.5.2.1
•Cisco Catalyst SD-WAN Manager 20.11.1.2
•Cisco Catalyst SD-WAN Manager 20.9.8_LI_Images
•Cisco Catalyst SD-WAN Manager 20.6.3.0.19
•Cisco Catalyst SD-WAN Manager 20.6.5.2.1
•Cisco Catalyst SD-WAN Manager 17.2.4
•Cisco Catalyst SD-WAN Manager 20.6.5.1
•Cisco Catalyst SD-WAN Manager 20.3.4.3
•Cisco Catalyst SD-WAN Manager 20.12.5_LI_Images
•Cisco Catalyst SD-WAN Manager 20.6.7
•Cisco Catalyst SD-WAN Manager 20.6.8
•Cisco Catalyst SD-WAN Manager 20.6.1.2
•Cisco Catalyst SD-WAN Manager 20.15.1_LI_Images
•Cisco Catalyst SD-WAN Manager 20.10.1.1
•Cisco Catalyst SD-WAN Manager 20.6.5.2
•Cisco Catalyst SD-WAN Manager 20.6.3.0.23
•Cisco Catalyst SD-WAN Manager 18.4.501_ES
•Cisco Catalyst SD-WAN Manager 20.12.4.0.03
•Cisco Catalyst SD-WAN Manager 20.3.2.1_927
•Cisco Catalyst SD-WAN Manager 20.9.4.1_LI_Images
•Cisco Catalyst SD-WAN Manager 20.6.6.0.1
•Cisco Catalyst SD-WAN Manager 20.9.3.0.4
•Cisco Catalyst SD-WAN Manager 20.9.6.0.3
•Cisco Catalyst SD-WAN Manager 20.18.1_LI_Images
•Cisco Catalyst SD-WAN Manager 20.6.2
•Cisco Catalyst SD-WAN Manager 20.6.3.0.31
•Cisco Catalyst SD-WAN Manager 20.1.12
•Cisco Catalyst SD-WAN Manager 20.15.3.1
•Cisco Catalyst SD-WAN Manager 18.3.1
•Cisco Catalyst SD-WAN Manager 18.4.0
•Cisco Catalyst SD-WAN Manager 20.12.4
•Cisco Catalyst SD-WAN Manager 20.6.3.1
•Cisco Catalyst SD-WAN Manager 20.9.3.0.12
•Cisco Catalyst SD-WAN Manager 17.2.5
•Cisco Catalyst SD-WAN Manager 18.4.0.1
•Cisco Catalyst SD-WAN Manager 20.6.5.1.14
•Cisco Catalyst SD-WAN Manager 20.11.1.1
•Cisco Catalyst SD-WAN Manager 20.9.3.0.17
•Cisco Catalyst SD-WAN Manager 20.9.3.0.3
•Cisco Catalyst SD-WAN Manager 20.12.5.1_LI_Images
•Cisco Catalyst SD-WAN Manager 20.9.3_LI_ Images
•Cisco Catalyst SD-WAN Manager 20.6.2.1
•Cisco Catalyst SD-WAN Manager 20.6.2.2.2
•Cisco Catalyst SD-WAN Manager 19.2.3
•Cisco Catalyst SD-WAN Manager 20.14.1_LI_Images
•Cisco Catalyst SD-WAN Manager 18.3.4
•Cisco Catalyst SD-WAN Manager 20.9.1.1
•Cisco Catalyst SD-WAN Manager 20.3.6
•Cisco Catalyst SD-WAN Manager 20.3.3.0.14
•Cisco Catalyst SD-WAN Manager 20.9.8
•Cisco Catalyst SD-WAN Manager 20.12.6_LI_Images
•Cisco Catalyst SD-WAN Manager 20.4.1.2
•Cisco Catalyst SD-WAN Manager 20.6.5.3
•Cisco Catalyst SD-WAN Manager 20.6.1
•Cisco Catalyst SD-WAN Manager 20.6.5
•Cisco Catalyst SD-WAN Manager 20.11.1
•Cisco Catalyst SD-WAN Manager 18.4.4
•Cisco Catalyst SD-WAN Manager 20.9.3.2
•Cisco Catalyst SD-WAN Manager 19.2.4
•Cisco Catalyst SD-WAN Manager 20.6.4.2
•Cisco Catalyst SD-WAN Manager 20.14.1
•Cisco Catalyst SD-WAN Manager 19.2.929
•Cisco Catalyst SD-WAN Manager 20.3.3.0.8
•Cisco Catalyst SD-WAN Manager 20.1.3.1
•Cisco Catalyst SD-WAN Manager 20.6.3.0.5
•Cisco Catalyst SD-WAN Manager 20.6.4.0.19
•Cisco Catalyst SD-WAN Manager 20.3.2_925
•Cisco Catalyst SD-WAN Manager 20.3.4.0.19
•Cisco Catalyst SD-WAN Manager 20.3.2_937
•Cisco Catalyst SD-WAN Manager 20.3.4.0.5
•Cisco Catalyst SD-WAN Manager 20.18.2_LI_Images
•Cisco Catalyst SD-WAN Manager 20.6.1.1
•Cisco Catalyst SD-WAN Manager 18.2.0
•Cisco Catalyst SD-WAN Manager 20.6.2.2.4
•Cisco Catalyst SD-WAN Manager 20.9.5.3_LI_Images
•Cisco Catalyst SD-WAN Manager 20.18.1
•Cisco Catalyst SD-WAN Manager 20.6.5.1.13
•Cisco Catalyst SD-WAN Manager 18.3.6.1
•Cisco Catalyst SD-WAN Manager 20.9.1EFT2
•Cisco Catalyst SD-WAN Manager 20.9.4_LI_Images
•Cisco Catalyst SD-WAN Manager 20.9.2.3
•Cisco Catalyst SD-WAN Manager 20.9.1
•Cisco Catalyst SD-WAN Manager 19.2.4.0.1
•Cisco Catalyst SD-WAN Manager 20.6.3.0.25
•Cisco Catalyst SD-WAN Manager 20.6.3.4
•Cisco Catalyst SD-WAN Manager 20.3.3
•Cisco Catalyst SD-WAN Manager 20.3.4.1
•Cisco Catalyst SD-WAN Manager 20.1.1
•Cisco Catalyst SD-WAN Manager 20.4.1.0.01
•Cisco Catalyst SD-WAN Manager 20.3.5.0.8
•Cisco Catalyst SD-WAN Manager 20.9.7_LI _Images
•Cisco Catalyst SD-WAN Manager 20.9.2.0.01
•Cisco Catalyst SD-WAN Manager 18.3.3.1
•Cisco Catalyst SD-WAN Manager 20.4.1.1
•Cisco Catalyst SD-WAN Manager 20.6.3.0.2
•Cisco Catalyst SD-WAN Manager 20.3.3.1
•Cisco Catalyst SD-WAN Manager 20.4.2.2.4
•Cisco Catalyst SD-WAN Manager 20.9.3.0.18
•Cisco Catalyst SD-WAN Manager 20.6.6
•Cisco Catalyst SD-WAN Manager 20.3.7.1
•Cisco Catalyst SD-WAN Manager 20.9.4
•Cisco Catalyst SD-WAN Manager 20.6.5.1.2
•Cisco Catalyst SD-WAN Manager 20.7.1
•Cisco Catalyst SD-WAN Manager 20.12.5
•Cisco Catalyst SD-WAN Manager 20.9.3.1
•Cisco Catalyst SD-WAN Manager 20.12.6
•Cisco Catalyst SD-WAN Manager 20.1.2
•Cisco Catalyst SD-WAN Manager 20.3.4.0.20
•Cisco Catalyst SD-WAN Manager 18.4.303
•Cisco Catalyst SD-WAN Manager 20.3.4.0.26
•Cisco Catalyst SD-WAN Manager 19.2.4.0.9
•Cisco Catalyst SD-WAN Manager 20.5.1.2
•Cisco Catalyst SD-WAN Manager 20.6.3.0.10
•Cisco Catalyst SD-WAN Manager 20.18.2
•Cisco Catalyst SD-WAN Manager 20.12.4_LI_Images
•Cisco Catalyst SD-WAN Manager 20.15.2
•Cisco Catalyst SD-WAN Manager 20.9.2_LI_Images
•Cisco Catalyst SD-WAN Manager 20.3.5.0.9
•Cisco Catalyst SD-WAN Manager 20.6.0.18.3
•Cisco Catalyst SD-WAN Manager 20.6.3.0.41
•Cisco Catalyst SD-WAN Manager 20.12.501
•Cisco Catalyst SD-WAN Manager 20.3.4.0.9
•Cisco Catalyst SD-WAN Manager 20.13.1_LI_Images
•Cisco Catalyst SD-WAN Manager 20.4.2.2.3
•Cisco Catalyst SD-WAN Manager 20.3.2.0.5
•Cisco Catalyst SD-WAN Manager 20.4.1.1.5
•Cisco Catalyst SD-WAN Manager 20.12.4.0.6
•Cisco Catalyst SD-WAN Manager 20.6.3.0.11
•Cisco Catalyst SD-WAN Manager 20.9.6_LI_Images
•Cisco Catalyst SD-WAN Manager 20.15.3
•Cisco Catalyst SD-WAN Manager 20.12.2
•Cisco Catalyst SD-WAN Manager 20.12.5.2
•Cisco Catalyst SD-WAN Manager 20.15.4.1_LI_Images
•Cisco Catalyst SD-WAN Manager 20.9.3.0.21
•Cisco Catalyst SD-WAN Manager 20.15.2_LI_Images
•Cisco Catalyst SD-WAN Manager 18.3.6
•Cisco Catalyst SD-WAN Manager 20.5.1.0.2
•Cisco Catalyst SD-WAN Manager 20.1.1.1
•Cisco Catalyst SD-WAN Manager 20.4.2.2.1
•Cisco Catalyst SD-WAN Manager 20.6.3.0.32
•Cisco Catalyst SD-WAN Manager 20.3.4.0.24
•Cisco Catalyst SD-WAN Manager 20.9.5.1
•Cisco Catalyst SD-WAN Manager 20.3.3.0.16
•Cisco Catalyst SD-WAN Manager 20.3.7.2
•Cisco Catalyst SD-WAN Manager 20.1.3
•Cisco Catalyst SD-WAN Manager 20.9.7.1_LI _Images
•Cisco Catalyst SD-WAN Manager 20.3.5.0.7
•Cisco Catalyst SD-WAN Manager 20.4.2.0.4
•Cisco Catalyst SD-WAN Manager 20.3.3.1.10
•Cisco Catalyst SD-WAN Manager 20.4.2.3
•Cisco Catalyst SD-WAN Manager 20.6.3.0.39
•Cisco Catalyst SD-WAN Manager 18.3.5
•Cisco Catalyst SD-WAN Manager 20.6.3.0.45
•Cisco Catalyst SD-WAN Manager 20.6.3.0.46
•Cisco Catalyst SD-WAN Manager 20.4.2
•Cisco Catalyst SD-WAN Manager 20.9.5.1_LI_Images
•Cisco Catalyst SD-WAN Manager 20.13.1
•Cisco Catalyst SD-WAN Manager 20.9.5.3
•Cisco Catalyst SD-WAN Manager 20.6.3.0.27
•Cisco Catalyst SD-WAN Manager 18.3.8
•Cisco Catalyst SD-WAN Manager 20.6.5.1.3
•Cisco Catalyst SD-WAN Manager 20.4.2.2
•Cisco Catalyst SD-WAN Manager 20.16.1_LI_Images
•Cisco Catalyst SD-WAN Manager 20.15.4_LI_Images
•Cisco Catalyst SD-WAN Manager 19.3.0
•Cisco Catalyst SD-WAN Manager 20.12.5.2_LI_Images
•Cisco Catalyst SD-WAN Manager 20.3.3.0.18
•Cisco Catalyst SD-WAN Manager 20.9.5_LI_Images
•Cisco Catalyst SD-WAN Manager 18.4.3
•Cisco Catalyst SD-WAN Manager 17.2.7
•Cisco Catalyst SD-WAN Manager 20.6.3.0.33
•Cisco Catalyst SD-WAN Manager 20.9.6
•Cisco Catalyst SD-WAN Manager 19.2.0
•Cisco Catalyst SD-WAN Manager 19.2.4.0.8
•Cisco Catalyst SD-WAN Manager 20.9.4.0.4
•Cisco Catalyst SD-WAN Manager 20.3.3.0.17
•Cisco Catalyst SD-WAN Manager 20.3.2_928
•Cisco Catalyst SD-WAN Manager 18.3.1.1
•Cisco Catalyst SD-WAN Manager 18.4.1
•Cisco Catalyst SD-WAN Manager 20.9.4.1.6
•Cisco Catalyst SD-WAN Manager 20.3.3.0.2
•Cisco Catalyst SD-WAN Manager 20.12.3_LI_Images
•Cisco Catalyst SD-WAN Manager 20.3.3.1.1
•Cisco Catalyst SD-WAN Manager 19.2.097
•Cisco Catalyst SD-WAN Manager 20.7.2
•Cisco Catalyst SD-WAN Manager 20.10.1_LI_Images
•Cisco Catalyst SD-WAN Manager 20.6.3.3
•Cisco Catalyst SD-WAN Manager 20.12.1_LI_Images
•Cisco Catalyst SD-WAN Manager 19.2.098
•Cisco Catalyst SD-WAN Manager 18.4.5
•Cisco Catalyst SD-WAN Manager 20.7.1.0.2
•Cisco Catalyst SD-WAN Manager 20.15.4.1
•Cisco Catalyst SD-WAN Manager 20.9.5
•Cisco Catalyst SD-WAN Manager 20.12.1
•Cisco Catalyst SD-WAN Manager 20.6.5.5
•Cisco Catalyst SD-WAN Manager 20.9.3.0.24
•Cisco Catalyst SD-WAN Manager 20.9.4.1.1
•Cisco Catalyst SD-WAN Manager 20.6.3
•Cisco Catalyst SD-WAN Manager 20.9.5.1.4
•Cisco Catalyst SD-WAN Manager 20.3.2_929
•Cisco Catalyst SD-WAN Manager 20.4.2.2.2
•Cisco Catalyst SD-WAN Manager 20.10.1
•Cisco Catalyst SD-WAN Manager 20.4.2.0.1
•Cisco Catalyst SD-WAN Manager 20.5.1.1
•Cisco Catalyst SD-WAN Manager 20.6.2.0.4
•Cisco Catalyst SD-WAN Manager 20.6.3.1.1
•Cisco Catalyst SD-WAN Manager 20.12.401
•Cisco Catalyst SD-WAN Manager 20.3.2.1_930
•Cisco Catalyst SD-WAN Manager 17.2.8
•Cisco Catalyst SD-WAN Manager 20.6.4.0.21
•Cisco Catalyst SD-WAN Manager 20.5.0.1.1
•Cisco Catalyst SD-WAN Manager 20.9.5.2.16
•Cisco Catalyst SD-WAN Manager 20.3.4.0.25
•Cisco Catalyst SD-WAN Manager 20.3.4.2.2
•Cisco Catalyst SD-WAN Manager 20.8.1
•Cisco Catalyst SD-WAN Manager 20.6.4.1
•Cisco Catalyst SD-WAN Manager 20.9.3.0.2
•Cisco Catalyst SD-WAN Manager 20.9.5.2.21
•Cisco Catalyst SD-WAN Manager 17.2.9
•Cisco Catalyst SD-WAN Manager 20.3.8
•Cisco Catalyst SD-WAN Manager 20.6.5.1.4

Zusammenfassung

CVE-2026-20133 betrifft Cisco Catalyst SD-WAN Manager und ermöglicht nicht authentifizierten Angreifern aus der Ferne das Auslesen sensibler Informationen. Die Schwachstelle wurde mit einem CVSS-Score von 7.5 (High) bewertet. Cisco hat Sicherheitsupdates für betroffene Versionen bereitgestellt.

Technische Details

Die Schwachstelle existiert in der API-Schnittstelle von Cisco Catalyst SD-WAN Manager aufgrund unzureichender Dateisystemzugriffsbeschränkungen. Ein nicht authentifizierter, entfernter Angreifer kann durch API-Zugriff vertrauliche Daten des zugrunde liegenden Betriebssystems einsehen.

CVSS 3.1 Vektor: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Angriffsvektor: Netzwerk Angriffskomplexität: Niedrig Erforderliche Berechtigungen: Keine Benutzerinteraktion: Keine Vertraulichkeit: Hoch Integrität: Keine Verfügbarkeit: Keine

Cisco Bug ID: CSCws33583

Betroffene Systeme

Sämtliche Cisco Catalyst SD-WAN Manager Versionen vor 20.18 sind potenziell betroffen. Eine vollständige Liste der betroffenen Versionen befindet sich im Feld affectedSystems.

Empfehlungen und Maßnahmen

Cisco empfiehlt allen Kunden, auf die behobene Softwareversion zu aktualisieren. Es stehen keine Workarounds zur Verfügung. Kunden sollten die Aktualisierung gemäß den Cisco-Sicherheitsrichtlinien zeitnah durchführen. Betreiber von Systemen vor Version 20.18 sollten besonders zeitnah handeln, da die Schwachstelle ohne Authentifizierung aus der Ferne ausgenutzt werden kann.

Zur Erkennung möglicher Kompromittierung sollten folgende Logdateien geprüft werden:

/var/log/nms/containers/service-proxy/serviceproxy-access.log
/var/log/nms/vmanage-server.log

Quellen

REFERENZEN

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v