Cisco SD-WAN Solution up to 18.2.x Configuration/Monitoring memory corruption

Summaryinfo

A vulnerability has been found in Cisco SD-WAN Solution up to 18.2.x and classified as critical. This affects an unknown part of the component Configuration/Monitoring. This manipulation causes memory corruption. This vulnerability is registered as CVE-2018-0342. The attack needs to be launched locally. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability classified as critical was found in Cisco SD-WAN Solution up to 18.2.x (Network Management Software). Affected by this vulnerability is an unknown part of the component Configuration/Monitoring. The manipulation with an unknown input leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

A vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could allow an authenticated, local attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incomplete bounds checks for data that is provided by the configuration and monitoring service of the affected solution. An attacker could exploit this vulnerability by sending malicious data to the vDaemon listening service on an affected device. A successful exploit could allow the attacker to cause a buffer overflow condition on the affected device, which could allow the attacker to execute arbitrary code with root privileges on the device or cause the vDaemon listening service to reload and result in a DoS condition on the device. This vulnerability affects the following Cisco products if they are running a release of the Cisco SD-WAN Solution prior to Release 18.3.0: vBond Orchestrator Software, vEdge 100 Series Routers, vEdge 1000 Series Routers, vEdge 2000 Series Routers, vEdge 5000 Series Routers, vEdge Cloud Router Platform, vManage Network Management Software, vSmart Controller Software. Cisco Bug IDs: CSCvi70003.

The bug was discovered 07/18/2018. The weakness was published 07/18/2018 with Cisco as cisco-sa-20180718-sd-wan-bo as confirmed advisory (Website). It is possible to read the advisory at tools.cisco.com. This vulnerability is known as CVE-2018-0342 since 11/27/2017. Attacking locally is a requirement. A single authentication is necessary for exploitation. The technical details are unknown and an exploit is not publicly available.

Upgrading to version 18.3.0 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 104877†). Similar entries are available at VDB-121919, VDB-121917, VDB-121918 and VDB-121916. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Network Management Software

Vendor

• Cisco

Name

• SD-WAN Solution

Version

• 18.0
• 18.1
• 18.2

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion