Cisco SD-WAN Arbitrary File Creation Vulnerability Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Type: Arbitrary File Creation Vulnerability - Scope of Impact: Cisco SD-WAN Software - Affected Products: SD-WAN vBond Orchestrator Software, SD-WAN vEdge Cloud Routers, SD-WAN vEdge Routers, SD-WAN vManage Software, SD-WAN vSmart Controller Software - Affected Versions: Version 18.3 and prior - Affected Platform: Cisco SD-WAN Software 2. Vulnerability Impact: - Impact Description: Allows an unauthenticated local attacker to create or overwrite arbitrary files on the affected device, potentially leading to a denial of service (DoS). - Severity: High 3. Exploitation: - Exploitation Method: Exploited by including crafted parameters in specific commands. - Exploitation Result: Allows an attacker to create or overwrite arbitrary files on the affected device, potentially leading to a denial of service. 4. Remediation: - Available Fix: Cisco has released software updates to address this vulnerability. - Workarounds: There are no workarounds. 5. Affected Products: - Confirmed Affected Products: SD-WAN vBond Orchestrator Software, SD-WAN vEdge Cloud Routers, SD-WAN vEdge Routers, SD-WAN vManage Software, SD-WAN vSmart Controller Software - Confirmed Unaffected Products: Cisco IOS XE SD-WAN Software 6. Affected Versions: - Affected Versions: Version 18.3 and prior 7. Affected Platform: - Affected Platform: Cisco SD-WAN Software 8. Affected Products: - Affected Products: SD-WAN vBond Orchestrator Software, SD-WAN vEdge Cloud Routers, SD-WAN vEdge Routers, SD-WAN vManage Software, SD-WAN vSmart Controller Software 9. Affected Versions: - Affected Versions: Version 18.3 and prior 10. Affected Platform: - Affected Platform: Cisco SD-WAN Software 11. Affected Products: - Affected Products: SD-WAN vBond Orchestrator Software, SD-WAN vEdge Cloud Routers, SD-WAN vEdge Routers, SD-WAN vManage Software, SD-WAN vSmart Controller Software 12. Affected Versions: - Affected Versions: Version 18.3 and prior 13. Affected Platform: - Affected Platform: Cisco SD-WAN Software 14. Affected Products: - Affected Products: SD-WAN vBond Orchestrator Software, SD-WAN vEdge Cloud Routers, SD-WAN vEdge Routers, SD-WAN vManage Software, SD-WAN vSmart Controller Software 15. Affected Versions: - Affected Versions: Version 18.3 and prior 16. Affected Platform: - Affected Platform: Cisco SD-WAN Software 17. Affected Products: - Affected Products: SD-WAN vBond Orchestrator Software, SD-WAN vEdge Cloud Routers, SD-WAN vEdge Routers, SD-WAN vManage Software, SD-WAN vSmart Controller Software 18. Affected Versions: - Affected Versions: Version 18.3 and prior 19. Affected Platform: - Affected Platform: Cisco SD-WAN Software 20. Affected Products: - Affected Products: SD-WAN vBond Orchestrator Software, SD-WAN vEdge Cloud Routers, SD-WAN vEdge Routers, SD-WAN vManage Software, SD-WAN vSmart Controller Software 21. Affected Versions: - Affected Versions: Version 18.3 and prior 22. Affected Platform: - Affected Platform: Cisco SD-WAN Software 23. Affected Products: - Affected Products: SD-WAN vBond Orchestrator Software, SD-WAN vEdge Cloud Routers, SD-WAN vEdge Routers, SD-WAN vManage Software, SD-WAN vSmart Controller Software 24. Affected Versions: - Affected Versions: Version 18.3 and prior 25. Affected Platform: - Affected Platform: Cisco SD-WAN Software 26. Affected Products: - Affected Products: SD-WAN vBond Orchestrator Software, SD-WAN vEdge Cloud Routers, SD-WAN vEdge Routers, SD-WAN vManage Software, SD-WAN vSmart Controller Software 27. Affected Versions: - Affected Versions: Version 18.3 and prior 28. Affected Platform: - Affected Platform: Cisco SD-WAN Software 29. Affected Products: - Affected Products: SD-WAN vBond Orchestrator Software, SD-WAN vEdge Cloud Routers, SD-WAN vEdge Routers, SD-WAN vManage Software, SD-WAN vSmart Controller Software 30. Affected Versions: - Affected Versions: Version 18.3 and prior 31. Affected Platform: - Affected Platform: Cisco SD-WAN Software 32. Affected Products: - Affected Products: SD-WAN vBond Orchestrator Software, SD-WAN vEdge Cloud Routers, SD-WAN vEdge Routers, SD-WAN vManage Software, SD-WAN vSmart Controller Software 33. Affected Versions: - Affected Versions: Version 18.3 and prior 34. Affected Platform: - Affected Platform: Cisco SD-WAN Software 35. Affected Products: - Affected Products: SD-WAN vBond Orchestrator Software, SD-WAN vEdge Cloud Routers, SD-WAN vEdge Routers, SD-WAN vManage Software, SD-WAN vSmart Controller Software 36. Affected Versions: - Affected Versions: Version 18.3 and prior 37. Affected Platform: - Affected Platform: Cisco SD-WAN Software 38. Affected Products: - Affected Products: SD-WAN vBond Orchestrator Software, SD-WAN vEdge Cloud Routers, SD-WAN vEdge Routers, SD-WAN vManage Software, SD-WAN vSmart Controller Software 39. Affected Versions: - Affected Versions: Version 18.3 and prior 40. Affected Platform: - Affected Plat

Goal Reached Thanks to every supporter — we hit 100%!

Cisco SD-WAN Arbitrary File Creation Vulnerability Advisory