5.3
Medium
CVE-2023-20262 A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to…
Description
A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only. This vulnerability does not prevent the system from continuing to function, and web UI access is not affected. This vulnerability is due to insufficient resource management when an affected system is in an error condition. An attacker could exploit this vulnerability by sending malicious traffic to the affected system. A successful exploit could allow the attacker to cause the SSH process to crash and restart, resulting in a DoS condition for the SSH service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco SD-WAN Solution | 20.10.1.2 | No fix stated |
| Cisco SD-WAN Solution 20.9 | 20.9.1 → 20.9.2.3 | No fix stated |
| Cisco SD-WAN Solution | 20.8.1 | No fix stated |
| Cisco SD-WAN Solution 20.7 | 20.7.1 → 20.7.2 | No fix stated |
| Cisco SD-WAN Solution 20.6 | 20.6.1 → 20.6.5.5 | No fix stated |
| Cisco SD-WAN Solution 20.5 | 20.5.1 → 20.5.1.2 | No fix stated |
| Cisco SD-WAN Solution 20.4 | 20.4.1 → 20.4.2.3 | No fix stated |
| Cisco SD-WAN Solution 20.3 | 20.3.1 → 20.3.6 | No fix stated |
| Cisco SD-WAN Solution 20.1 | 20.1.1 → 20.1.12 | No fix stated |
Show the 21 other branches Hide the 21 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco SD-WAN Solution | 19.3.0 | No fix stated |
| Cisco SD-WAN Solution 19.2 | 19.2.0 → 19.2.929 | No fix stated |
| Cisco SD-WAN Solution | 19.1.0 | No fix stated |
| Cisco SD-WAN Solution 18.4 | 18.4.0 → 18.4.303 | No fix stated |
| Cisco SD-WAN Solution 18.3 | 18.3.0 → 18.3.8 | No fix stated |
| Cisco SD-WAN Solution | 18.2.0 | No fix stated |
| Cisco SD-WAN Solution 17.2 | 17.2.4 → 17.2.10 | No fix stated |
| Cisco SD-WAN vManage 20.10 | 20.10.1 → 20.10.1.2 | No fix stated |
| Cisco SD-WAN vManage 20.6 | 20.6.1 → 20.6.3 | No fix stated |
| Cisco SD-WAN vManage 20.5 | 20.5.1 → 20.5.1.2 | No fix stated |
| Cisco SD-WAN vManage 20.4 | 20.4.1 → 20.4.2.3 | No fix stated |
| Cisco SD-WAN vManage 20.3 | 20.3.1 → 20.3.6 | No fix stated |
| Cisco SD-WAN vManage 20.1 | 20.1.1 → 20.1.12 | No fix stated |
| Cisco SD-WAN vManage | 19.3.0 | No fix stated |
| Cisco SD-WAN vManage 19.2 | 19.2.0 → 19.2.929 | No fix stated |
| Cisco SD-WAN vManage | 19.1.0 | No fix stated |
| Cisco SD-WAN vManage 18.4 | 18.4.0 → 18.4.303 | No fix stated |
| Cisco SD-WAN vManage 18.3 | 18.3.0 → 18.3.8 | No fix stated |
| Cisco SD-WAN vManage | 18.2.0 | No fix stated |
| Cisco SD-WAN vManage 17.2 | 17.2.4 → 17.2.10 | No fix stated |
| Cisco SD-WAN vSmart | Versions not published |
References
- cisco-sa-sdwan-vman-sc-LRLfu2z sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco SD-WAN Solution
The 55 CVEs of Cisco SD-WAN Solution →
CVE-2022-20850
A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an…
5.5
Medium
CVE-2022-20818
Cisco SD-WAN Software Privilege Escalation Vulnerabilities
7.8
High
CVE-2022-20775
Cisco SD-WAN Path Traversal Vulnerability
7.8
High
CVE-2022-20716
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated…
7.8
High