Cisco SD-WAN Configuration and Management Database CVE-2018-0345 Remote Code Execution Vulnerability

Bugtraq ID:	104859
Class:	Input Validation Error
CVE:	CVE-2018-0345
Remote:	Yes
Local:	No
Published:	Jul 18 2018 12:00AM
Updated:	Jul 18 2018 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Cisco vSmart Controller 0 Cisco vManage Network Management 0 Cisco vBond Orchestrator 0 Cisco SD-WAN 0
Not Vulnerable:	Cisco SD-WAN 18.3

Cisco SD-WAN Configuration and Management Database CVE-2018-0345 Remote Code Execution Vulnerability

Cisco SD-WAN is prone to a remote code-execution vulnerability.

Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the application.

This issue is being tracked by Cisco Bug ID CSCvi69937.

Cisco SD-WAN Configuration and Management Database CVE-2018-0345 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco SD-WAN Configuration and Management Database CVE-2018-0345 Remote Code Execution Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco SD-WAN Solution Configuration and Management Database Remote Code Executio (Cisco)