Riskcovery

CVE-2023-20034

State
Published
Severity
7.5 High
Published
Sep 27, 2023
Updated
Aug 2, 2024
Reserved
Oct 27, 2022

Read the record on cve.org

Description

Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to access the Elasticsearch configuration database of an affected device with the privileges of the elasticsearch user. These vulnerability is due to the presence of a static username and password configured on the vManage. An attacker could exploit this vulnerability by sending a crafted HTTP request to a reachable vManage on port 9200. A successful exploit could allow the attacker to view the Elasticsearch database content. There are workarounds that address this vulnerability.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Ncisco

Weaknesses

  • CWE-798 Use of Hard-coded Credentials

Affected Products

ProductVersions
Cisco SD-WAN vManageCisco
  • 17.2.6Affected
  • 17.2.7Affected
  • 17.2.8Affected
  • 17.2.9Affected
  • 17.2.10Affected
  • 17.2.4Affected
  • 17.2.5Affected
  • 18.3.1.1Affected
  • 18.3.3.1Affected
  • 18.3.3Affected
  • 18.3.4Affected
  • 18.3.5Affected
  • 18.3.7Affected
  • 18.3.8Affected
  • 18.3.6.1Affected
  • 18.3.1Affected
  • 18.3.0Affected
  • 18.4.0.1Affected
  • 18.4.3Affected
  • 18.4.302Affected
  • 18.4.303Affected
  • 18.4.4Affected
  • 18.4.5Affected
  • 18.4.0Affected
  • 18.4.1Affected
  • and 33 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.