Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
Vulnerability Description
A vulnerability in Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker with low privileges to gain root privileges on the underlying operating system. This vulnerability is due to an insufficient user authentication mechanism in the REST API. An attacker could exploit this vulnerability by sending a request to the REST API of the affected system. A successful exploit could allow the attacker to gain root privileges on the underlying operating system.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
特权API的不正确使用
Vulnerability Title
Cisco Catalyst SD-WAN Manager 安全漏洞
Vulnerability Description
Cisco Catalyst SD-WAN Manager（Cisco SD-WAN vManage）是美国思科（Cisco）公司的一个高度可定制的仪表板。可简化和自动化 Cisco SD-WAN 的部署、配置、管理和操作。 Cisco Catalyst SD-WAN Manager存在安全漏洞，该漏洞源于REST API用户身份验证机制不足，可能导致低权限攻击者获取root权限。
CVSS Information
N/A
Vulnerability Type
N/A