Details of VAR-202307-1372

ID

VAR-202307-1372

CVE

CVE-2023-20214

TITLE

Cisco SD-WAN vManage Security hole

Trust: 0.6

sources: CNNVD: CNNVD-202307-1198

DESCRIPTION

A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to gain read permissions or limited write permissions to the configuration of an affected Cisco SD-WAN vManage instance. This vulnerability is due to insufficient request validation when using the REST API feature. An attacker could exploit this vulnerability by sending a crafted API request to an affected vManage instance. A successful exploit could allow the attacker to retrieve information from and send information to the configuration of the affected Cisco vManage instance. This vulnerability only affects the REST API and does not affect the web-based management interface or the CLI. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-unauthapi-sphCLYPA

Trust: 0.99

sources: NVD: CVE-2023-20214 // VULMON: CVE-2023-20214

AFFECTED PRODUCTS

vendor:	cisco	model:	catalyst sd-wan manager	scope:	lt	version:	20.11.1.2	Trust: 1.0
vendor:	cisco	model:	catalyst sd-wan manager	scope:	gte	version:	20.6.4	Trust: 1.0
vendor:	cisco	model:	sd-wan vmanage	scope:	gte	version:	20.10	Trust: 1.0
vendor:	cisco	model:	catalyst sd-wan manager	scope:	gte	version:	20.11	Trust: 1.0
vendor:	cisco	model:	catalyst sd-wan manager	scope:	gte	version:	20.7	Trust: 1.0
vendor:	cisco	model:	catalyst sd-wan manager	scope:	lt	version:	20.9.3.2	Trust: 1.0
vendor:	cisco	model:	sd-wan vmanage	scope:	lt	version:	20.10.1.2	Trust: 1.0
vendor:	cisco	model:	catalyst sd-wan manager	scope:	gte	version:	20.6.5	Trust: 1.0
vendor:	cisco	model:	catalyst sd-wan manager	scope:	lt	version:	20.6.4.2	Trust: 1.0
vendor:	cisco	model:	catalyst sd-wan manager	scope:	lt	version:	20.6.5.5	Trust: 1.0
vendor:	cisco	model:	catalyst sd-wan manager	scope:	eq	version:	20.6.3.3	Trust: 1.0

sources: NVD: CVE-2023-20214

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2023-20214
value:	CRITICAL
Trust: 1.0
ykramarz@cisco.com:	CVE-2023-20214
value:	CRITICAL
Trust: 1.0

nvd@nist.gov:	CVE-2023-20214
baseSeverity:	CRITICAL
baseScore:	9.1
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	5.2
version:	3.1
Trust: 2.0

sources: NVD: CVE-2023-20214 // NVD: CVE-2023-20214

PROBLEMTYPE DATA

problemtype:

CWE-287

Trust: 1.0

sources: NVD: CVE-2023-20214

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202307-1198

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202307-1198

PATCH

title:	Cisco SD-WAN vManage Security vulnerabilities	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=245950	Trust: 0.6
title:	Cisco: Cisco SD-WAN vManage Unauthenticated REST API Access Vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts&qid=cisco-sa-vmanage-unauthapi-sphCLYPA	Trust: 0.1

sources: VULMON: CVE-2023-20214 // CNNVD: CNNVD-202307-1198

EXTERNAL IDS

db:	NVD	id:	CVE-2023-20214	Trust: 1.7
db:	AUSCERT	id:	ESB-2023.3936.2	Trust: 0.6
db:	CNNVD	id:	CNNVD-202307-1198	Trust: 0.6
db:	VULMON	id:	CVE-2023-20214	Trust: 0.1

sources: VULMON: CVE-2023-20214 // CNNVD: CNNVD-202307-1198 // NVD: CVE-2023-20214

REFERENCES

url:	https://sec.cloudapps.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-vmanage-unauthapi-sphclypa	Trust: 1.1
url:	https://www.auscert.org.au/bulletins/esb-2023.3936.2	Trust: 0.6

sources: VULMON: CVE-2023-20214 // CNNVD: CNNVD-202307-1198 // NVD: CVE-2023-20214

SOURCES

db:	VULMON	id:	CVE-2023-20214
db:	CNNVD	id:	CNNVD-202307-1198
db:	NVD	id:	CVE-2023-20214

LAST UPDATE DATE

2024-08-14T15:41:40.581000+00:00

SOURCES UPDATE DATE

db:	CNNVD	id:	CNNVD-202307-1198	date:	2023-07-14T00:00:00
db:	NVD	id:	CVE-2023-20214	date:	2024-01-25T17:15:37.260

SOURCES RELEASE DATE

db:	CNNVD	id:	CNNVD-202307-1198	date:	2023-07-13T00:00:00
db:	NVD	id:	CVE-2023-20214	date:	2023-08-03T22:15:11.420