CVE-2018-0434 Cisco SD-WAN Solution Certificate Validation Vulnerability

What is CVE-2018-0434?

CVE-2018-0434 is a high-severity vulnerability in Cisco SD-WAN Solution, published on 5 Oct 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected software. An attacker could exploit this vulnerability by supplying a crafted certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections to the affected software.

Weakness: CWE-295

Which versions are affected by CVE-2018-0434?

It affects 5 products.

Products include Cisco Vedge 1000 Firmware, Cisco Vedge 100 Firmware, Cisco Vedge 2000 Firmware, Cisco Vedge 5000 Firmware, Cisco Vmanage Network Management System.

How do I fix CVE-2018-0434?

No fix has been published for CVE-2018-0434 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-0434 being exploited?

There is no known exploitation of CVE-2018-0434 in the wild and no public exploit code.

Other vulnerabilities in Cisco SD-WAN Solution

• CVE-2018-0432 Cisco SD-WAN Solution Privilege Escalation Vulnerability High 8.8
• CVE-2021-1509 Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities High 7.5
• CVE-2021-1510 Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities High 7.5
• CVE-2021-1511 Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6qq2-f6xc-778x.