Not rated
CVE-2018-0434 A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated,…
Description
A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected software. An attacker could exploit this vulnerability by supplying a crafted certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections to the affected software.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco SD-WAN Solution | Versions not published |
References
- 20180905 Cisco SD-WAN Solution Certificate Validation Vulnerability tools.cisco.com
- 105294 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Cisco SD-WAN Solution
The 55 CVEs of Cisco SD-WAN Solution →
CVE-2023-20262
A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to…
5.3
Medium
CVE-2022-20850
A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an…
5.5
Medium
CVE-2022-20818
Cisco SD-WAN Software Privilege Escalation Vulnerabilities
7.8
High
CVE-2022-20775
Cisco SD-WAN Path Traversal Vulnerability
7.8
High