CRITICAL✓ PATCH🇬🇧 English

CVE-2018-15387

CVSS 9.8v3.1pub. 2018-10-05upd. 2024-11-21

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a system image signed with a crafted certificate to an affected device, bypassing the certificate validation. An exploit could allow an attacker to deploy a crafted system image.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Cisco Sd Wan

    APP
    Cisco
    18.3.017.2.0 – 17.2.8 (bez)
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2020-3374CRITICAL9.9ten sam produkt

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenti...

CVE-2020-3375CRITICAL9.8ten sam produkt

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a b...

CVE-2022-20775HIGH7.8⚠ KEVten sam produkt

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain eleva...

CVE-2023-20034HIGH7.5ten sam produkt

Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauth...

CVE-2022-20818HIGH7.8ten sam produkt

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to g...