cve-2023-20262
Vulnerability from cvelistv5
Published
2023-09-27 17:16
Modified
2024-08-02 09:05
Severity ?
EPSS score ?
Summary
A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only. This vulnerability does not prevent the system from continuing to function, and web UI access is not affected.
This vulnerability is due to insufficient resource management when an affected system is in an error condition. An attacker could exploit this vulnerability by sending malicious traffic to the affected system. A successful exploit could allow the attacker to cause the SSH process to crash and restart, resulting in a DoS condition for the SSH service.
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | Cisco | Cisco SD-WAN Solution |
Version: 17.2.4 Version: 17.2.5 Version: 17.2.6 Version: 17.2.7 Version: 17.2.8 Version: 17.2.9 Version: 17.2.10 Version: 18.2.0 Version: 18.3.0 Version: 18.3.1 Version: 18.3.3 Version: 18.3.3.1 Version: 18.3.4 Version: 18.3.5 Version: 18.3.6 Version: 18.3.7 Version: 18.3.8 Version: 18.4.0 Version: 18.4.1 Version: 18.4.0.1 Version: 18.4.3 Version: 18.4.302 Version: 18.4.303 Version: 18.4.4 Version: 18.4.5 Version: 18.4.6 Version: 19.1.0 Version: 19.2.0 Version: 19.2.097 Version: 19.2.099 Version: 19.2.1 Version: 19.2.2 Version: 19.2.3 Version: 19.2.929 Version: 19.2.31 Version: 19.2.4 Version: 19.3.0 Version: 20.1.1 Version: 20.1.1.1 Version: 20.1.11 Version: 20.1.12 Version: 20.1.2 Version: 20.1.3 Version: 20.1.3.1 Version: 20.3.1 Version: 20.3.2 Version: 20.3.2.1 Version: 20.3.3 Version: 20.3.3.1 Version: 20.3.4 Version: 20.3.4.2 Version: 20.3.4.1 Version: 20.3.5 Version: 20.3.6 Version: 20.3.4.3 Version: 20.3.5.1 Version: 20.4.1 Version: 20.4.1.1 Version: 20.4.1.2 Version: 20.4.2 Version: 20.4.2.2 Version: 20.4.2.1 Version: 20.4.2.3 Version: 20.5.1 Version: 20.5.1.2 Version: 20.5.1.1 Version: 20.6.1 Version: 20.6.1.1 Version: 20.6.2.2 Version: 20.6.2.1 Version: 20.6.2 Version: 20.6.3 Version: 20.6.3.1 Version: 20.6.4 Version: 20.6.4.1 Version: 20.6.5 Version: 20.6.5.2 Version: 20.6.3.2 Version: 20.6.3.3 Version: 20.6.1.2 Version: 20.6.3.4 Version: 20.6.4.2 Version: 20.6.5.4 Version: 20.6.5.5 Version: 20.7.1 Version: 20.7.1.1 Version: 20.7.2 Version: 20.8.1 Version: 20.9.1 Version: 20.9.2.3 Version: 20.10.1.2 |
|||||||||||
|
||||||||||||||
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T09:05:36.887Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "cisco-sa-sdwan-vman-sc-LRLfu2z", tags: [ "x_transferred", ], url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-sc-LRLfu2z", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "Cisco SD-WAN Solution", vendor: "Cisco", versions: [ { status: "affected", version: "17.2.4", }, { status: "affected", version: "17.2.5", }, { status: "affected", version: "17.2.6", }, { status: "affected", version: "17.2.7", }, { status: "affected", version: "17.2.8", }, { status: "affected", version: "17.2.9", }, { status: "affected", version: "17.2.10", }, { status: "affected", version: "18.2.0", }, { status: "affected", version: "18.3.0", }, { status: "affected", version: "18.3.1", }, { status: "affected", version: "18.3.3", }, { status: "affected", version: "18.3.3.1", }, { status: "affected", version: "18.3.4", }, { status: "affected", version: "18.3.5", }, { status: "affected", version: "18.3.6", }, { status: "affected", version: "18.3.7", }, { status: "affected", version: "18.3.8", }, { status: "affected", version: "18.4.0", }, { status: "affected", version: "18.4.1", }, { status: "affected", version: "18.4.0.1", }, { status: "affected", version: "18.4.3", }, { status: "affected", version: "18.4.302", }, { status: "affected", version: "18.4.303", }, { status: "affected", version: "18.4.4", }, { status: "affected", version: "18.4.5", }, { status: "affected", version: "18.4.6", }, { status: "affected", version: "19.1.0", }, { status: "affected", version: "19.2.0", }, { status: "affected", version: "19.2.097", }, { status: "affected", version: "19.2.099", }, { status: "affected", version: "19.2.1", }, { status: "affected", version: "19.2.2", }, { status: "affected", version: "19.2.3", }, { status: "affected", version: "19.2.929", }, { status: "affected", version: "19.2.31", }, { status: "affected", version: "19.2.4", }, { status: "affected", version: "19.3.0", }, { status: "affected", version: "20.1.1", }, { status: "affected", version: "20.1.1.1", }, { status: "affected", version: "20.1.11", }, { status: "affected", version: "20.1.12", }, { status: "affected", version: "20.1.2", }, { status: "affected", version: "20.1.3", }, { status: "affected", version: "20.1.3.1", }, { status: "affected", version: "20.3.1", }, { status: "affected", version: "20.3.2", }, { status: "affected", version: "20.3.2.1", }, { status: "affected", version: "20.3.3", }, { status: "affected", version: "20.3.3.1", }, { status: "affected", version: "20.3.4", }, { status: "affected", version: "20.3.4.2", }, { status: "affected", version: "20.3.4.1", }, { status: "affected", version: "20.3.5", }, { status: "affected", version: "20.3.6", }, { status: "affected", version: "20.3.4.3", }, { status: "affected", version: "20.3.5.1", }, { status: "affected", version: "20.4.1", }, { status: "affected", version: "20.4.1.1", }, { status: "affected", version: "20.4.1.2", }, { status: "affected", version: "20.4.2", }, { status: "affected", version: "20.4.2.2", }, { status: "affected", version: "20.4.2.1", }, { status: "affected", version: "20.4.2.3", }, { status: "affected", version: "20.5.1", }, { status: "affected", version: "20.5.1.2", }, { status: "affected", version: "20.5.1.1", }, { status: "affected", version: "20.6.1", }, { status: "affected", version: "20.6.1.1", }, { status: "affected", version: "20.6.2.2", }, { status: "affected", version: "20.6.2.1", }, { status: "affected", version: "20.6.2", }, { status: "affected", version: "20.6.3", }, { status: "affected", version: "20.6.3.1", }, { status: "affected", version: "20.6.4", }, { status: "affected", version: "20.6.4.1", }, { status: "affected", version: "20.6.5", }, { status: "affected", version: "20.6.5.2", }, { status: "affected", version: "20.6.3.2", }, { status: "affected", version: "20.6.3.3", }, { status: "affected", version: "20.6.1.2", }, { status: "affected", version: "20.6.3.4", }, { status: "affected", version: "20.6.4.2", }, { status: "affected", version: "20.6.5.4", }, { status: "affected", version: "20.6.5.5", }, { status: "affected", version: "20.7.1", }, { status: "affected", version: "20.7.1.1", }, { status: "affected", version: "20.7.2", }, { status: "affected", version: "20.8.1", }, { status: "affected", version: "20.9.1", }, { status: "affected", version: "20.9.2.3", }, { status: "affected", version: "20.10.1.2", }, ], }, { product: "Cisco SD-WAN vManage", vendor: "Cisco", versions: [ { status: "affected", version: "17.2.6", }, { status: "affected", version: "17.2.7", }, { status: "affected", version: "17.2.8", }, { status: "affected", version: "17.2.9", }, { status: "affected", version: "17.2.10", }, { status: "affected", version: "17.2.4", }, { status: "affected", version: "17.2.5", }, { status: "affected", version: "18.3.1.1", }, { status: "affected", version: "18.3.3.1", }, { status: "affected", version: "18.3.3", }, { status: "affected", version: "18.3.4", }, { status: "affected", version: "18.3.5", }, { status: "affected", version: "18.3.7", }, { status: "affected", version: "18.3.8", }, { status: "affected", version: "18.3.6.1", }, { status: "affected", version: "18.3.1", }, { status: "affected", version: "18.3.0", }, { status: "affected", version: "18.4.0.1", }, { status: "affected", version: "18.4.3", }, { status: "affected", version: "18.4.302", }, { status: "affected", version: "18.4.303", }, { status: "affected", version: "18.4.4", }, { status: "affected", version: "18.4.5", }, { status: "affected", version: "18.4.0", }, { status: "affected", version: "18.4.1", }, { status: "affected", version: "18.4.6", }, { status: "affected", version: "19.2.0", }, { status: "affected", version: "19.2.097", }, { status: "affected", version: "19.2.099", }, { status: "affected", version: "19.2.1", }, { status: "affected", version: "19.2.2", }, { status: "affected", version: "19.2.3", }, { status: "affected", version: "19.2.31", }, { status: "affected", version: "19.2.929", }, { status: "affected", version: "19.2.4", }, { status: "affected", version: "20.1.1.1", }, { status: "affected", version: "20.1.12", }, { status: "affected", version: "20.1.1", }, { status: "affected", version: "20.1.2", }, { status: "affected", version: "20.1.3", }, { status: "affected", version: "19.3.0", }, { status: "affected", version: "19.1.0", }, { status: "affected", version: "18.2.0", }, { status: "affected", version: "20.3.1", }, { status: "affected", version: "20.3.2", }, { status: "affected", version: "20.3.2.1", }, { status: "affected", version: "20.3.3", }, { status: "affected", version: "20.3.3.1", }, { status: "affected", version: "20.3.4", }, { status: "affected", version: "20.3.4.1", }, { status: "affected", version: "20.3.4.2", }, { status: "affected", version: "20.3.5", }, { status: "affected", version: "20.3.6", }, { status: "affected", version: "20.3.4.3", }, { status: "affected", version: "20.3.5.1", }, { status: "affected", version: "20.4.1", }, { status: "affected", version: "20.4.1.1", }, { status: "affected", version: "20.4.1.2", }, { status: "affected", version: "20.4.2", }, { status: "affected", version: "20.4.2.2", }, { status: "affected", version: "20.4.2.1", }, { status: "affected", version: "20.4.2.3", }, { status: "affected", version: "20.5.1", }, { status: "affected", version: "20.5.1.2", }, { status: "affected", version: "20.5.1.1", }, { status: "affected", version: "20.6.1", }, { status: "affected", version: "20.6.1.1", }, { status: "affected", version: "20.6.2.1", }, { status: "affected", version: "20.6.2.2", }, { status: "affected", version: "20.6.2", }, { status: "affected", version: "20.6.3", }, { status: "affected", version: "20.6.1.2", }, { status: "affected", version: "20.10.1", }, { status: "affected", version: "20.10.1.1", }, { status: "affected", version: "20.10.1.2", }, ], }, { product: "Cisco SD-WAN vSmart", vendor: "Cisco", versions: [ { status: "affected", version: "N/A", }, ], }, ], descriptions: [ { lang: "en", value: "A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only. This vulnerability does not prevent the system from continuing to function, and web UI access is not affected.\r\n\r This vulnerability is due to insufficient resource management when an affected system is in an error condition. An attacker could exploit this vulnerability by sending malicious traffic to the affected system. A successful exploit could allow the attacker to cause the SSH process to crash and restart, resulting in a DoS condition for the SSH service.", }, ], exploits: [ { lang: "en", value: "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, format: "cvssV3_1", }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-399", description: "Resource Management Errors", lang: "en", type: "cwe", }, ], }, ], providerMetadata: { dateUpdated: "2024-01-25T16:58:34.677Z", orgId: "d1c1063e-7a18-46af-9102-31f8928bc633", shortName: "cisco", }, references: [ { name: "cisco-sa-sdwan-vman-sc-LRLfu2z", url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-sc-LRLfu2z", }, ], source: { advisory: "cisco-sa-sdwan-vman-sc-LRLfu2z", defects: [ "CSCwd46383", ], discovery: "INTERNAL", }, }, }, cveMetadata: { assignerOrgId: "d1c1063e-7a18-46af-9102-31f8928bc633", assignerShortName: "cisco", cveId: "CVE-2023-20262", datePublished: "2023-09-27T17:16:50.429Z", dateReserved: "2022-10-27T18:47:50.373Z", dateUpdated: "2024-08-02T09:05:36.887Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { nvd: "{\"cve\":{\"id\":\"CVE-2023-20262\",\"sourceIdentifier\":\"ykramarz@cisco.com\",\"published\":\"2023-09-27T18:15:11.757\",\"lastModified\":\"2024-11-21T07:41:01.443\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only. This vulnerability does not prevent the system from continuing to function, and web UI access is not affected.\\r\\n\\r This vulnerability is due to insufficient resource management when an affected system is in an error condition. An attacker could exploit this vulnerability by sending malicious traffic to the affected system. A successful exploit could allow the attacker to cause the SSH process to crash and restart, resulting in a DoS condition for the SSH service.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en el servicio SSH de Cisco Catalyst SD-WAN Manager podría permitir que un atacante remoto no autenticado provoque una falla del proceso, lo que resultaría en una condición de DoS solo para el acceso SSH. Esta vulnerabilidad no impide que el sistema siga funcionando y el acceso a la interfaz de usuario web no se ve afectado. Esta vulnerabilidad se debe a una gestión insuficiente de los recursos cuando un sistema afectado se encuentra en una condición de error. Un atacante podría aprovechar esta vulnerabilidad enviando tráfico malicioso al sistema afectado. Un exploit exitoso podría permitir al atacante provocar que el proceso SSH se bloquee y se reinicie, lo que resultaría en una condición DoS para el servicio SSH.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"ykramarz@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"ykramarz@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-399\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"20.4\",\"versionEndExcluding\":\"20.9.3\",\"matchCriteriaId\":\"41D2CD47-67C0-47B3-9BB8-889A7245FBAD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"20.3.7\",\"matchCriteriaId\":\"39FEB958-7035-4AB2-95D3-316D72D544EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"20.10\",\"versionEndExcluding\":\"20.11.1\",\"matchCriteriaId\":\"03133A84-35B3-4FF9-86EA-3C13738E2AE2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:sd-wan_vmanage:20.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06E19EEE-FE9E-4E6C-AE79-CFB14FDF37F3\"}]}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-sc-LRLfu2z\",\"source\":\"ykramarz@cisco.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-sc-LRLfu2z\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}", }, }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.