Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Frederic Mezou

Researcher fromOrange Business and Orange CERT-CC
#46850of 56,335
6Total CVSS
Vulnerabilities · 1
PT-2023-2530
6.0
2023-04-19
Cisco · Cisco Sdwan Vmanage · CVE-2023-20098
**Name of the Vulnerable Software and Affected Versions** Cisco SDWAN vManage Software (affected versions not specified) **Description** A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files. This issue arises from improper filtering of directory traversal character sequences within system commands. An attacker with administrative privileges could exploit this vulnerability by running a system command containing directory traversal character sequences to target an arbitrary file, potentially allowing the deletion of arbitrary files from the system, including files owned by root. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.