CVE-2023-20214 (sd-wan_vmanage)

A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to gain read permissions or limited write permissions to the configuration of an affected Cisco SD-WAN vManage instance.

This vulnerability is due to insufficient request validation when using the REST API feature. An attacker could exploit this vulnerability by sending a crafted API request to an affected vManage instance. A successful exploit could allow the attacker to retrieve …

api authentication cisco cisco sd-wan cisco sd-wan vmanage configuration cve exploit feature instance permissions request rest rest api sd-wan software validation vmanage vulnerability wan