QID 316966

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated,
remote attacker to execute arbitrary code or gain
access to sensitive information, or allow an authenticated, local attacker to gain
escalated privileges or gain unauthorized access to the application.

Affected Products
Cisco SD-WAN vManage Software releases :
Prior to 20.3.3
From 20.4.0 Prior to 20.4.1
From 20.5.0 Prior to 20.5.1

QID detection logic:
The QID checks for Cisco SD WAN version retrieved via Unix Auth using "show system status" command.

A successful exploit could allow the attacker to bypass authorization checks and gain elevated privileges within the affected system.