CVE-2018-15387 Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability

2018-10-0514:00:00

CWE-20

cisco

www.cve.org

AI Score

9.4

Confidence

High

EPSS

0.002

Percentile

55.4%

JSON

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a system image signed with a crafted certificate to an affected device, bypassing the certificate validation. An exploit could allow an attacker to deploy a crafted system image.

CNA Affected

[
  {
    "product": "Cisco SD-WAN Solution",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]