Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability

A vulnerability exists in the CLI of Cisco Catalyst SD-WAN Manager that allows an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. This issue arises from improper access controls on files in the local file system. An attacker with valid read-only credentials and CLI access can exploit this vulnerability by executing a series of crafted commands. A successful exploit could enable the attacker to overwrite files and gain root privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized file modifications and elevated privileges on the affected device.

Remediation

Cisco has released software updates to address this vulnerability. Customers are advised to upgrade to a fixed release. For guidance on which release to upgrade to, consult the Cisco Security Advisories page.