James Spadaro Iii

**Name of the Vulnerable Software and Affected Versions** Cisco IOS XE SD-WAN Software (affected versions not specified) **Description** A vulnerability in the vDaemon process could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This issue is due to insufficient bounds checking when the device processes traffic. An attacker could exploit this vulnerability by sending crafted traffic to the device, potentially allowing them to conduct a controllable buffer overflow attack or cause a device reload, resulting in a denial of service (DoS) condition. The attacker must have a man-in-the-middle position between Cisco vManage and an associated device that is running an affected version of Cisco IOS XE SD-WAN Software. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE SD-WAN Software (affected versions not specified) Description: The issue is related to insufficient validation of user-supplied input in the command-line interface of the software, allowing an authenticated, local attacker to conduct path traversal attacks. This could enable the attacker to obtain read access to sensitive files on the affected system by sending a crafted request. The vulnerability is due to incorrect restriction of the directory path name with limited access. Recommendations: For all affected versions, update to the latest software version released by Cisco that addresses this issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation. Avoid using the vulnerable CLI interface until the issue is resolved with a software update.

**Name of the Vulnerable Software and Affected Versions** Cisco IOS XE SD-WAN Software (affected versions not specified) **Description** A vulnerability in the vDaemon process could allow an unauthenticated, remote attacker to cause a device to reload, resulting in a denial of service (DoS) condition. This issue is due to insufficient handling of malformed packets. An attacker could exploit this vulnerability by sending crafted traffic to an affected device, causing the device to reload and resulting in a DoS condition. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.