Product:
Cisco Catalyst SD-WAN Manager
Summary
A vulnerability in Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system access restrictions. An attacker could exploit this vulnerability by accessing the API of an affected system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-20133 |
Exploitation
An attacker can exploit this vulnerability by sending requests to the API of the affected Cisco Catalyst SD-WAN Manager. Since the vulnerability allows for insufficient file system access restrictions, the attacker can retrieve sensitive information from the underlying operating system without needing authentication.
Affected Products
- Cisco Catalyst SD-WAN Manager: Vulnerable due to insufficient file system access restrictions, allowing unauthorized access to sensitive information.
Mitigation
To mitigate this vulnerability, it is recommended to implement proper file system access controls and ensure that only authenticated users can access the API of the Cisco Catalyst SD-WAN Manager. Regularly updating the system and monitoring access logs can also help in identifying and preventing unauthorized access.