File Retrieval Vulnerability in Cisco Catalyst SD-WAN Manager

CVE-2023-20261

What is CVE-2023-20261?

A vulnerability exists in the web UI of Cisco Catalyst SD-WAN Manager, which can be exploited by authenticated remote attackers to retrieve arbitrary files from the underlying Linux file system. This is due to insufficient validation of the parameters sent to the web interface, allowing attackers to issue specially crafted requests after logging in. Successful exploitation could lead to significant data exposure, underscoring the necessity for stringent access controls and regular security assessments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References