CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2018-15387

CVSS 9.8v3.1pub. 2018-10-05upd. 2024-11-21

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a system image signed with a crafted certificate to an affected device, bypassing the certificate validation. An exploit could allow an attacker to deploy a crafted system image.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Cisco Sd Wan

    APP
    Cisco
    18.3.017.2.0 – 17.2.8 (bez)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2020-3374CRITICAL9.9ten sam produkt

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenti...

CVE-2020-3375CRITICAL9.8ten sam produkt

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a b...

CVE-2022-20775HIGH7.8⚠ KEVten sam produkt

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain eleva...

CVE-2023-20034HIGH7.5ten sam produkt

Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauth...

CVE-2022-20818HIGH7.8ten sam produkt

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to g...