Cisco SD-WAN CVE-2018-0433 Local Command Injection Vulnerability

Bugtraq ID:	105295
Class:	Input Validation Error
CVE:	CVE-2018-0433
Remote:	No
Local:	Yes
Published:	Sep 05 2018 12:00AM
Updated:	Sep 05 2018 12:00AM
Credit:	Cisco
Vulnerable:	Cisco vSmart Controller 0 Cisco vManage Network Management 0 Cisco vEdge Cloud Router 0 Cisco vEdge 5000 0 Cisco vEdge 2000 0 Cisco vEdge 1000 0 Cisco vBond Orchestrator 0 Cisco SD-WAN 0
Not Vulnerable:	Cisco SD-WAN 18.3

Cisco SD-WAN CVE-2018-0433 Local Command Injection Vulnerability

Cisco SD-WAN is prone to a local command-injection vulnerability.

An attacker may exploit this issue to inject and execute arbitrary commands within the context of the affected application; this may aid in further attacks.

This issue being tracked by Cisco Bug IDs CSCvi69802 and CSCvi69903.

Cisco SD-WAN CVE-2018-0433 Local Command Injection Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco SD-WAN CVE-2018-0433 Local Command Injection Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco SD-WAN Solution Command Injection Vulnerability (Cisco)