Remote Code Execution Vulnerability in Cisco SD-WAN Solution

CVE-2018-0343

What is CVE-2018-0343?

A vulnerability in the configuration and management service of Cisco's SD-WAN Solution can enable an authenticated, remote attacker to execute arbitrary code or create a denial of service condition on affected systems. This flaw arises from inadequate access restrictions on the HTTP management interface, allowing attackers to send malicious HTTP requests. Successful exploitation grants the attacker vmanage user privileges, leading to potential system manipulation and service interruptions. This issue impacts various Cisco products running versions prior to Release 18.3.0.

References