TI-2023-06966 Aliases CVE-2023-20262 GHSA-h2rg-8hq7-x2qc

Resource management flaw in Cisco SD-WAN Solution

LOW 35CWE-399Published 2023-09-27 · Updated 2024-08-02

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only. This vulnerability does not prevent the system from continuing to function, and web UI access is not affected. This vulnerability is due to insufficient resource management when an affected system is in an error condition. An attacker could exploit this vulnerability by sending malicious traffic to the affected system. A successful exploit could allow the attacker to cause the SSH process to crash and restart, resulting in a DoS condition for the SSH service.

Why it matters now

EPSS 0.01001 63rd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Cisco	Cisco SD-WAN Solution	17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; 17.2.10; 18.2.0; 18.3.0; 18.3.1; 18.3.3; 18.3.3.1; 18.3.4; 18.3.5; 18.3.6; 18.3.7; 18.3.8; 18.4.0; 18.4.1; 18.4.0.1; 18.4.3; 18.4.302; 18.4.303; 18.4.4; 18.4.5; 18.4.6; 19.1.0; 19.2.0; 19.2.097; 19.2.099; 19.2.1; 19.2.2; 19.2.3; 19.2.929; 19.2.31; 19.2.4; 19.3.0; 20.1.1; 20.1.1.1; 20.1.11; 20.1.12; 20.1.2; 20.1.3; 20.1.3.1; 20.3.1; 20.3.2; 20.3.2.1; 20.3.3; 20.3.3.1; 20.3.4; 20.3.4.2; 20.3.4.1; 20.3.5; 20.3.6; 20.3.4.3; 20.3.5.1; 20.4.1; 20.4.1.1; 20.4.1.2; 20.4.2; 20.4.2.2; 20.4.2.1; 20.4.2.3; 20.5.1; 20.5.1.2; 20.5.1.1; 20.6.1; 20.6.1.1; 20.6.2.2; 20.6.2.1; 20.6.2; 20.6.3; 20.6.3.1; 20.6.4; 20.6.4.1; 20.6.5; 20.6.5.2; 20.6.3.2; 20.6.3.3; 20.6.1.2; 20.6.3.4; 20.6.4.2; 20.6.5.4; 20.6.5.5; 20.7.1; 20.7.1.1; 20.7.2; 20.8.1; 20.9.1; 20.9.2.3; 20.10.1.2	—	No fix listed	CNA
Cisco	Cisco SD-WAN vManage	17.2.6; 17.2.7; 17.2.8; 17.2.9; 17.2.10; 17.2.4; 17.2.5; 18.3.1.1; 18.3.3.1; 18.3.3; 18.3.4; 18.3.5; 18.3.7; 18.3.8; 18.3.6.1; 18.3.1; 18.3.0; 18.4.0.1; 18.4.3; 18.4.302; 18.4.303; 18.4.4; 18.4.5; 18.4.0; 18.4.1; 18.4.6; 19.2.0; 19.2.097; 19.2.099; 19.2.1; 19.2.2; 19.2.3; 19.2.31; 19.2.929; 19.2.4; 20.1.1.1; 20.1.12; 20.1.1; 20.1.2; 20.1.3; 19.3.0; 19.1.0; 18.2.0; 20.3.1; 20.3.2; 20.3.2.1; 20.3.3; 20.3.3.1; 20.3.4; 20.3.4.1; 20.3.4.2; 20.3.5; 20.3.6; 20.3.4.3; 20.3.5.1; 20.4.1; 20.4.1.1; 20.4.1.2; 20.4.2; 20.4.2.2; 20.4.2.1; 20.4.2.3; 20.5.1; 20.5.1.2; 20.5.1.1; 20.6.1; 20.6.1.1; 20.6.2.1; 20.6.2.2; 20.6.2; 20.6.3; 20.6.1.2; 20.10.1; 20.10.1.1; 20.10.1.2	—	No fix listed	CNA
Cisco	Cisco SD-WAN vSmart	N/A	—	No fix listed	CNA

Cisco SD-WAN Solution VendorCisco Affected 17.2.4; 17.2.5; 17.2.6; 17.2.7; 17.2.8; 17.2.9; 17.2.10; 18.2.0; 18.3.0; 18.3.1; 18.3.3; 18.3.3.1; 18.3.4; 18.3.5; 18.3.6; 18.3.7; 18.3.8; 18.4.0; 18.4.1; 18.4.0.1; 18.4.3; 18.4.302; 18.4.303; 18.4.4; 18.4.5; 18.4.6; 19.1.0; 19.2.0; 19.2.097; 19.2.099; 19.2.1; 19.2.2; 19.2.3; 19.2.929; 19.2.31; 19.2.4; 19.3.0; 20.1.1; 20.1.1.1; 20.1.11; 20.1.12; 20.1.2; 20.1.3; 20.1.3.1; 20.3.1; 20.3.2; 20.3.2.1; 20.3.3; 20.3.3.1; 20.3.4; 20.3.4.2; 20.3.4.1; 20.3.5; 20.3.6; 20.3.4.3; 20.3.5.1; 20.4.1; 20.4.1.1; 20.4.1.2; 20.4.2; 20.4.2.2; 20.4.2.1; 20.4.2.3; 20.5.1; 20.5.1.2; 20.5.1.1; 20.6.1; 20.6.1.1; 20.6.2.2; 20.6.2.1; 20.6.2; 20.6.3; 20.6.3.1; 20.6.4; 20.6.4.1; 20.6.5; 20.6.5.2; 20.6.3.2; 20.6.3.3; 20.6.1.2; 20.6.3.4; 20.6.4.2; 20.6.5.4; 20.6.5.5; 20.7.1; 20.7.1.1; 20.7.2; 20.8.1; 20.9.1; 20.9.2.3; 20.10.1.2 Fixed in — No fix listed CNA
Cisco SD-WAN vManage VendorCisco Affected 17.2.6; 17.2.7; 17.2.8; 17.2.9; 17.2.10; 17.2.4; 17.2.5; 18.3.1.1; 18.3.3.1; 18.3.3; 18.3.4; 18.3.5; 18.3.7; 18.3.8; 18.3.6.1; 18.3.1; 18.3.0; 18.4.0.1; 18.4.3; 18.4.302; 18.4.303; 18.4.4; 18.4.5; 18.4.0; 18.4.1; 18.4.6; 19.2.0; 19.2.097; 19.2.099; 19.2.1; 19.2.2; 19.2.3; 19.2.31; 19.2.929; 19.2.4; 20.1.1.1; 20.1.12; 20.1.1; 20.1.2; 20.1.3; 19.3.0; 19.1.0; 18.2.0; 20.3.1; 20.3.2; 20.3.2.1; 20.3.3; 20.3.3.1; 20.3.4; 20.3.4.1; 20.3.4.2; 20.3.5; 20.3.6; 20.3.4.3; 20.3.5.1; 20.4.1; 20.4.1.1; 20.4.1.2; 20.4.2; 20.4.2.2; 20.4.2.1; 20.4.2.3; 20.5.1; 20.5.1.2; 20.5.1.1; 20.6.1; 20.6.1.1; 20.6.2.1; 20.6.2.2; 20.6.2; 20.6.3; 20.6.1.2; 20.10.1; 20.10.1.1; 20.10.1.2 Fixed in — No fix listed CNA
Cisco SD-WAN vSmart VendorCisco Affected N/A Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:a:cisco:catalyst_sd-wan_manager::::::::	20.4 to before 20.9.3	Vulnerable	Cisco
cpe:2.3:a:cisco:sd-wan_vmanage::::::::	before 20.3.7; 20.10 to before 20.11.1	Vulnerable	Cisco
cpe:2.3:a:cisco:sd-wan_vmanage:20.12:::::::*	20.12	Vulnerable	Cisco

cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:* Versions 20.4 to before 20.9.3 Vulnerable ·Cisco
cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:* Versions before 20.3.7; 20.10 to before 20.11.1 Vulnerable ·Cisco
cpe:2.3:a:cisco:sd-wan_vmanage:20.12:*:*:*:*:*:*:* Versions 20.12 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-20262
2026-10-03 Alias added: GHSA-h2rg-8hq7-x2qc

References

Advisory 1

cisco-sa-sdwan-vman-sc-LRLfu2z

TI-2026-53490 Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability KEVCVSS 3.1CRITICAL 9.8
TI-2026-16388 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability KEVCVSS 3.1CRITICAL 10.0
TI-2026-16340 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability KEVCVSS 3.1CRITICAL 10.0
TI-2026-16436 Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability KEVCVSS 3.1HIGH 7.8
TI-2022-05334 Cisco SD-WAN Software Privilege Escalation Vulnerability KEVCVSS 3.1HIGH 7.8
TI-2026-16341 Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability KEVCVSS 3.1HIGH 7.5

See all 91 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences