Cisco SD-WAN Solution up to 18.2.x Configuration/Management HTTP Request access control

Summaryinfo

A vulnerability was found in Cisco SD-WAN Solution up to 18.2.x and classified as problematic. This vulnerability affects unknown code of the component Configuration/Management. Such manipulation as part of HTTP Request leads to access control. This vulnerability is documented as CVE-2018-0343. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Cisco SD-WAN Solution up to 18.2.x (Network Management Software). Affected by this issue is an unknown code of the component Configuration/Management. The manipulation as part of a HTTP Request leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Impacted is availability. CVE summarizes:

A vulnerability in the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to execute arbitrary code with vmanage user privileges or cause a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient access restrictions to the HTTP management interface of the affected solution. An attacker could exploit this vulnerability by sending a malicious HTTP request to the affected management service through an authenticated device. A successful exploit could allow the attacker to execute arbitrary code with vmanage user privileges or stop HTTP services on an affected system. This vulnerability affects the following Cisco products if they are running a release of the Cisco SD-WAN Solution prior to Release 18.3.0: vBond Orchestrator Software, vEdge 100 Series Routers, vEdge 1000 Series Routers, vEdge 2000 Series Routers, vEdge 5000 Series Routers, vEdge Cloud Router Platform, vManage Network Management Software, vSmart Controller Software. Cisco Bug IDs: CSCvi69976.

The bug was discovered 07/18/2018. The weakness was released 07/18/2018 as cisco-sa-20180718-sd-wan-code- as confirmed advisory (Website). The advisory is shared for download at tools.cisco.com. This vulnerability is handled as CVE-2018-0343 since 11/27/2017. The attack may be launched remotely. A simple authentication is needed for exploitation. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1068.

Upgrading to version 18.3.0 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 104861†). Entries connected to this vulnerability are available at VDB-121920, VDB-121919, VDB-121917 and VDB-121918. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Network Management Software

Vendor

• Cisco

Name

• SD-WAN Solution

Version

• 18.0
• 18.1
• 18.2

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion