A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN…
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local attacker to bypass authorization and allow the attacker to roll back the configuration on vManage controllers and edge router device. This vulnerability is due to improper access control in the cli-management interface of an affected system. An attacker with low-privilege (read only) access to the cli could exploit this vulnerability by sending a request to roll back the configuration on for other controller and devices managed by an affected system. A successful exploit could allow the attacker to to roll back the configuration on for other controller and devices managed by an affected system.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Cisco | Cisco SD-WAN vManage | 17.2.6; 17.2.7; 17.2.8; 17.2.9; 17.2.10; 17.2.4; 17.2.5; 18.3.1.1; 18.3.3.1; 18.3.3; 18.3.4; 18.3.5; 18.3.7; 18.3.8; 18.3.6.1; 18.3.1; 18.3.0; 18.4.0.1; 18.4.3; 18.4.302; 18.4.303; 18.4.4; 18.4.5; 18.4.0; 18.4.1; 18.4.6; 19.2.0; 19.2.097; 19.2.099; 19.2.1; 19.2.2; 19.2.3; 19.2.31; 19.2.929; 19.2.4; 20.1.1.1; 20.1.12; 20.1.1; 20.1.2; 20.1.3; 19.3.0; 19.1.0; 18.2.0; 20.3.1; 20.3.2; 20.3.2.1; 20.3.3; 20.3.3.1; 20.3.4; 20.3.4.1; 20.3.4.2; 20.3.5; 20.3.6; 20.3.7; 20.3.7.1; 20.3.4.3; 20.3.5.1; 20.3.7.2; 20.4.1; 20.4.1.1; 20.4.1.2; 20.4.2; 20.4.2.2; 20.4.2.1; 20.4.2.3; 20.5.1; 20.5.1.2; 20.5.1.1; 20.6.1; 20.6.1.1; 20.6.1.2 | — | No fix listed | CNA |
- Cisco SD-WAN vManage VendorCisco Affected 17.2.6; 17.2.7; 17.2.8; 17.2.9; 17.2.10; 17.2.4; 17.2.5; 18.3.1.1; 18.3.3.1; 18.3.3; 18.3.4; 18.3.5; 18.3.7; 18.3.8; 18.3.6.1; 18.3.1; 18.3.0; 18.4.0.1; 18.4.3; 18.4.302; 18.4.303; 18.4.4; 18.4.5; 18.4.0; 18.4.1; 18.4.6; 19.2.0; 19.2.097; 19.2.099; 19.2.1; 19.2.2; 19.2.3; 19.2.31; 19.2.929; 19.2.4; 20.1.1.1; 20.1.12; 20.1.1; 20.1.2; 20.1.3; 19.3.0; 19.1.0; 18.2.0; 20.3.1; 20.3.2; 20.3.2.1; 20.3.3; 20.3.3.1; 20.3.4; 20.3.4.1; 20.3.4.2; 20.3.5; 20.3.6; 20.3.7; 20.3.7.1; 20.3.4.3; 20.3.5.1; 20.3.7.2; 20.4.1; 20.4.1.1; 20.4.1.2; 20.4.2; 20.4.2.2; 20.4.2.1; 20.4.2.3; 20.5.1; 20.5.1.2; 20.5.1.1; 20.6.1; 20.6.1.1; 20.6.1.2 Fixed in — No fix listed CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.7:*:*:*:*:*:*:* | 20.7 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.8:*:*:*:*:*:*:* | 20.8 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9:*:*:*:*:*:*:* | 20.9 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.11:*:*:*:*:*:*:* | 20.11 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:* | before 20.6.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:sd-wan_vmanage:20.10:*:*:*:*:*:*:* | 20.10 | Vulnerable | Cisco |
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.7:*:*:*:*:*:*:* Versions 20.7 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.8:*:*:*:*:*:*:* Versions 20.8 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.9:*:*:*:*:*:*:* Versions 20.9 Vulnerable ·Cisco
- cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.11:*:*:*:*:*:*:* Versions 20.11 Vulnerable ·Cisco
- cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:* Versions before 20.6.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:sd-wan_vmanage:20.10:*:*:*:*:*:*:* Versions 20.10 Vulnerable ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-20253
- 2026-10-03 Alias added: GHSA-p5q8-553c-rh75
References
Advisory 1
More Cisco Catalyst Sd-wan Manager vulnerabilities
- TI-2026-53490 Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2026-16388 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability KEVCVSS 3.1CRITICAL 10.0
- TI-2026-16340 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability KEVCVSS 3.1CRITICAL 10.0
- TI-2026-16436 Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability KEVCVSS 3.1HIGH 7.8
- TI-2022-05334 Cisco SD-WAN Software Privilege Escalation Vulnerability KEVCVSS 3.1HIGH 7.8
- TI-2026-16341 Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability KEVCVSS 3.1HIGH 7.5
Sources
- CVE-2023-20253 · CVE Program
- CVE-2023-20253 · NVD
- FIRST EPSS
- GHSA-p5q8-553c-rh75 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences