File Retrieval Vulnerability in Cisco Catalyst SD-WAN Manager

CVE-2023-20261

What is CVE-2023-20261?

A vulnerability exists in the web UI of Cisco Catalyst SD-WAN Manager, which can be exploited by authenticated remote attackers to retrieve arbitrary files from the underlying Linux file system. This is due to insufficient validation of the parameters sent to the web interface, allowing attackers to issue specially crafted requests after logging in. Successful exploitation could lead to significant data exposure, underscoring the necessity for stringent access controls and regular security assessments.

References