Directory Traversal Vulnerability in Cisco SDWAN vManage Software

CVE-2023-20098

What is CVE-2023-20098?

A flaw in the CLI of Cisco SDWAN vManage Software permits an authenticated, local attacker to execute system commands with directory traversal sequences. This misconfiguration allows the attacker, who possesses administrative privileges, to delete arbitrary files, including those owned by the root user. The risk arises from insufficient filtering, which could lead to significant disruptions and data loss within the affected system.

References