description: A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system.
The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by persuading a user to import a crafted XML file with malicious entries. A successful exploit could allow the attacker to read and write files within the affected application.
problem types: Improper Restriction of XML External Entity Reference
affected:
{
vendor: Cisco
product: Cisco SD-WAN vManage
versions:
version: 17.2.6, status: affected
version: 17.2.7, status: affected
version: 17.2.8, status: affected
version: 17.2.9, status: affected
version: 17.2.10, status: affected
version: 17.2.4, status: affected
version: 17.2.5, status: affected
version: 18.3.1.1, status: affected
version: 18.3.3.1, status: affected
version: 18.3.3, status: affected
version: 18.3.4, status: affected
version: 18.3.5, status: affected
version: 18.3.7, status: affected
version: 18.3.8, status: affected
version: 18.3.6.1, status: affected
version: 18.3.1, status: affected
version: 18.3.0, status: affected
version: 18.4.0.1, status: affected
version: 18.4.3, status: affected
version: 18.4.302, status: affected
version: 18.4.303, status: affected
version: 18.4.4, status: affected
version: 18.4.5, status: affected
version: 18.4.0, status: affected
version: 18.4.1, status: affected
version: 19.2.0, status: affected
version: 19.2.097, status: affected
version: 19.2.099, status: affected
version: 19.2.1, status: affected
version: 19.2.2, status: affected
version: 19.2.3, status: affected
version: 19.2.31, status: affected
version: 19.2.929, status: affected
version: 20.1.1.1, status: affected
version: 20.1.12, status: affected
version: 20.1.1, status: affected
version: 19.3.0, status: affected
version: 19.1.0, status: affected
version: 18.2.0, status: affected
version: 20.3.1, status: affected
}
metrics:
format: cvssV3_0
cvssV3_0: [
version: 3.0
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
baseScore: 6.5
baseSeverity: MEDIUM
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
]
exploits: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.