QID 316970

A vulnerability in the web-based messaging service interface of Cisco SD-WAN vManage Software
could allow an unauthenticated, adjacent attacker to bypass authentication
and authorization and modify the configuration of an affected system.
To exploit this vulnerability, the attacker
must be able to access an associated Cisco SD-WAN vEdge device.

Affected Products
Cisco devices if they are running a vulnerable release of Cisco SD-WAN vManage Software. Software releases :
Prior to 20.3.1
From 20.4.0 Prior to 20.4.1
From 20.5.0 Prior to 20.5.1

QID detection logic:
The QID checks for Cisco SD WAN version retrieved via Unix Auth using "show system status" command.

A successful exploit could allow the attacker to gain unauthenticated read and write access
to the affected vManage system. With this access, the
attacker could access information about the affected vManage system,
modify the configuration of the system, or make configuration changes
to devices that are managed by the system.