Skip to main content
Apexward Pulse
3 reportsPriority Medium

Cisco SD-WAN vulnerabilities and endpoint risks

New vulnerabilities in Cisco SD-WAN products and research on endpoint management platform risks highlight potential security threats for UK organisations using these technologies.

First report Latest

What is going on

  • Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands within the application.
  • Cisco Catalyst SD-WAN Manager contains an exposure of sensitive information to an unauthorised actor vulnerability that could allow remote attackers to view sensitive information on affected systems.
  • An attacker could exploit a vulnerability in Cisco Catalyst SD-WAN Manager by uploading a malicious file on the local file system with reports of exploitation in the wild.
  • Research indicates that endpoint management platforms can become powerful attack tools when compromised, allowing hackers to deploy malware, execute commands, and disrupt thousands of devices.
  • What to watch: Further confirmation of exploitation attempts against the Cisco SD-WAN vulnerabilities and details of how endpoint management platforms were compromised.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed