CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2018-15387

CVSS 9.8v3.1pub. 2018-10-05upd. 2024-11-21

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a system image signed with a crafted certificate to an affected device, bypassing the certificate validation. An exploit could allow an attacker to deploy a crafted system image.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Cisco Sd Wan

    APP
    Cisco
    18.3.017.2.0 – 17.2.8 (excl.)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2020-3374CRITICAL9.9PL ✓same product

Obejście autoryzacji w Cisco SD-WAN vManage — eskalacja uprawnień

CVE-2020-3375CRITICAL9.8PL ✓same product

Buffer overflow w Cisco SD-WAN — zdalne wykonanie kodu jako root

CVE-2022-20775HIGH7.8⚠ KEVsame product

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain eleva...

CVE-2023-20034HIGH7.5same product

Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauth...

CVE-2022-20818HIGH7.8same product

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to g...