CVE Vulnerability Advisory Database

[Affected Scope] On-premise deployments of VeloCloud Orchestrator (VCO).

[Impact] Authenticated users can escalate to 'superuser operator' privileges, leading to full system compromise and data breach.

[Mitigation] Apply official security patches immediately and restrict network access to the management interface.

[Affected Scope] Cisco Catalyst SD-WAN Manager (formerly vManage) software

[Impact] An unauthenticated, remote attacker can bypass authentication mechanisms and gain full administrative access to the system via crafted HTTP requests.

[Mitigation] Immediately apply the official security patches provided by Cisco and restrict access to management interfaces using ACLs.

[Affected Scope] Arista VeloCloud Orchestrator (VCO) On-premise deployments.

[Impact] Unauthenticated remote attackers can access privileged internal functions, leading to full compromise of the orchestrator and managed SD-WAN infrastructure.

[Mitigation] Immediately apply the latest security patches from Arista and restrict access to management interfaces via VPN/ACLs.

[Affected Scope] On-premises deployments of VeloCloud Orchestrator (VCO)

[Impact] Unauthenticated remote attackers can access privileged internal functionalities and execute arbitrary OS commands (CWE-78), leading to complete compromise of the orchestrator's confidentiality, integrity, and availability

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external network access to the orchestrator management interface

[Affected Scope] Cisco Catalyst SD-WAN Controller (formerly vSmart), Manager (formerly vManage), and Validator (formerly vBond)

[Impact] An authenticated, local attacker with netadmin privileges can execute arbitrary commands as root and push unauthorized configuration changes to edge devices

[Mitigation] Immediately upgrade to the fixed software versions recommended by Cisco and verify the configuration integrity of all managed edge devices.

[Affected Scope] Network devices and virtual appliances running Cisco Catalyst SD-WAN Software

[Impact] Attackers can bypass file system restrictions via vshell access to read sensitive underlying operating system information

[Mitigation] Apply the official Cisco security patches immediately and restrict vshell/CLI access privileges

[Affected Scope] Cisco Catalyst SD-WAN Manager releases prior to 20.18

[Impact] Unauthenticated, remote attackers can retrieve the DCA password file via crafted HTTP requests and gain unauthorized DCA user privileges

[Mitigation] Immediately upgrade Cisco Catalyst SD-WAN Manager to release 20.18 or later

[Affected Scope] Cisco Catalyst SD-WAN Controller (formerly vSmart), Cisco Catalyst SD-WAN Manager (formerly vManage), and Cisco Catalyst SD-WAN Validator (formerly vBond).

[Impact] Unauthenticated remote attackers can bypass peering authentication, gain high-privileged administrative access, and manipulate the entire SD-WAN fabric configuration via NETCONF.

[Mitigation] Apply official Cisco software patches immediately and restrict control plane access to trusted peer IPs using Access Control Lists (ACLs).

[Affected Scope] Versa Concerto SD-WAN orchestration platform versions 12.1.2 through 12.2.0

[Impact] Unauthenticated attackers can bypass authentication via Traefik misconfiguration to access administrative and internal Actuator endpoints, potentially exposing heap dumps and trace logs containing sensitive credentials

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external access to administrative and Actuator endpoints

[Affected Scope] Systems and network devices running vulnerable versions of Cisco SD-WAN Software CLI

[Impact] An authenticated, local attacker can execute arbitrary commands with root privileges by running a maliciously crafted command

[Mitigation] Apply the official software updates provided by Cisco immediately, as there are no viable workarounds

[Affected Scope] Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8

[Impact] Authenticated attackers can exploit improper input validation (CWE-78) to execute arbitrary system commands with elevated privileges, leading to complete compromise of the appliance

[Mitigation] Immediately upgrade to the official patched versions (10.2.3, 10.0.8, or higher) provided by the vendor

[Affected Scope] Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8

[Impact] Unauthenticated remote attackers can exploit SQL injection to manipulate the database, bypass authentication, and ultimately execute arbitrary commands with root privileges.

[Mitigation] Immediately upgrade to the official patched versions (10.2.3 / 10.0.8 or higher) and restrict external access to the management interface.

[Affected Scope] VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 with the local web UI component enabled.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges, leading to complete compromise of the SD-WAN appliance.

[Mitigation] Immediately upgrade to version 3.1.0 or higher, or disable the local web UI service and restrict access from untrusted networks.