CVE-2023-20034highCWE-798

CVE-2023-20034: high-severity vulnerability in Cisco SD-WAN vManage

Published · Updated

Follow this CVE+ Monitor Cisco SD-WAN vManage

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.8%
Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to access the Elasticsearch configuration database of an affected device with the privileges of the elasticsearch user. These vulnerability is due to the presence of a static username and password configured on the vManage. An attacker could exploit this vulnerability by sending a crafted HTTP request to a reachable vManage on port 9200. A successful exploit could allow the attacker to view the Elasticsearch database content. There are workarounds that address this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Cisco · Cisco SD-WAN vManage
Related CVEs — Cisco SD-WAN vManage

In the same product, most dangerous first.

CVE-2020-27128MEDIUMCisco SD-WAN vManage Software Arbitrary File Creation VulnerabilityEPSS 58.5%CVE-2020-3387HIGHCisco SD-WAN vManage Software Remote Code Execution VulnerabilityEPSS 13.0%CVE-2020-3375CRITICALCisco SD-WAN Solution Software Buffer Overflow VulnerabilityEPSS 3.9%CVE-2020-3437MEDIUMCisco SD-WAN vManage Software Information Disclosure VulnerabilityEPSS 2.9%CVE-2020-3401MEDIUMCisco SD-WAN vManage Software Path Traversal VulnerabilityEPSS 2.6%CVE-2020-3381HIGHCisco SD-WAN vManage Software Directory Traversal VulnerabilityEPSS 2.6%