4.4
Moyenne
CVE-2023-20098 A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete…
Description
A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files. This vulnerability is due to improper filtering of directory traversal character sequences within system commands. An attacker with administrative privileges could exploit this vulnerability by running a system command containing directory traversal character sequences to target an arbitrary file. A successful exploit could allow the attacker to delete arbitrary files from the system, including files owned by root.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco SD-WAN vManage 20.9 | 20.9.1 → 20.9.2 | Pas de correctif indiqué |
Autres CVE de Cisco SD-WAN vManage
Les 61 CVE de Cisco SD-WAN vManage →
CVE-2023-20261
A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve…
6.5
Moyenne
CVE-2023-20179
A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage,…
4.3
Moyenne
CVE-2023-20252
A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could…
9.8
Critique
CVE-2023-20262
A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to…
5.3
Moyenne