CVE-2018-0349CWE-20

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of…

published July 18, 2018

CVSS
—
EPSS
3%
Percentile
87.2
In the wild
Unconfirmed
What it is

⚠️ A crafty command could let an attacker overwrite files on your Cisco SD-WAN devices with just a little tweak. How sneaky is that? Think of it like a waiter who misreads your special request and accidentally replaces the chef's secret sauce with something completely different—only here, it’s your system files getting swapped out! If exploited, an attacker could overwrite critical files, gaining escalated privileges and potentially controlling the whole device. Imagine the chaos that could ensue if someone hijacked your devices, turning them into unwitting accomplices!

Put simply

Think of it like a waiter who misreads your special request and accidentally replaces the chef's secret sauce with something completely different—only here, it’s your system files getting swapped out! This vulnerability arises from improper input validation of the 'request admin-tech' command in the CLI of Cisco's SD-WAN Solution, allowing unauthorized file overwrites on the operating system.

What to do

If exploited, an attacker could overwrite critical files, gaining escalated privileges and potentially controlling the whole device. Imagine the chaos that could ensue if someone hijacked your devices, turning them into unwitting accomplices! To protect your systems, ensure you upgrade to Cisco SD-WAN Solution Release 18.3.0 or later. Review your configurations, and consider implementing tighter access controls to minimize risks. Don't forget to regularly audit your devices! You've got this! With a few steps, you can keep your network safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03007 · 87.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-07-18T23:00Z
EPSS history
Timeline
  • 18 JUL 23:00Z
    A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of…
    cvelistv5