Product:
Cisco Catalyst SD-WAN Manager
Summary
A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. This vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.4 | CVE-2026-20122 |
Exploitation
To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. Once authenticated, the attacker can upload a malicious file that could overwrite arbitrary files on the local file system, potentially gaining vmanage user privileges.
Affected Products
- Cisco Catalyst SD-WAN Manager: Vulnerable due to improper file handling in the API interface, allowing file overwrites.
Mitigation
To mitigate this vulnerability, ensure that only trusted users have API access and regularly review user permissions. Additionally, implement monitoring to detect any unauthorized file uploads.