CVE-2023-20261

Summary

CVE-2023-20261 is a vulnerability affecting the web UI of Cisco Catalyst SD-WAN Manager. It allows authenticated, remote attackers to retrieve arbitrary files from an affected system due to improper validation of parameters sent to the web UI. An attacker can exploit this vulnerability by logging into Cisco Catalyst SD-WAN Manager and issuing specially crafted web UI requests. Successful exploitation could result in the attacker gaining unauthorized access to files on the underlying Linux file system of the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.