Cisco SD-WAN Solution Certificate Validation Vulnerability

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected software. An attacker could exploit this vulnerability by supplying a crafted certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections to the affected software.

N/A

证书验证不恰当

Cisco SD-WAN Solution 安全漏洞

Cisco vEdge 100 Series Routers等都是美国思科（Cisco）公司的产品。Cisco vEdge 100 Series Routers是一款100系列的路由器产品。vManage Network Management System是一套网络管理系统。SD-WAN Solution是运行在其中的一套网络扩展解决方案。 Cisco SD-WAN Solution 18.3.0之前版本中的Zero Touch Provisioning功能存在安全漏洞，该漏洞源于软件对证书的验证不充分。

N/A

N/A