cveboard RSS feed

CVE-2023-20214

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to gain read permissions or limited write permissions to the configuration of an affected Cisco SD-WAN vManage instance. This vulnerability is due to insufficient request validation when using the REST API feature. An attacker could exploit this vulnerability by sending a crafted API request to an affected vManage instance. A successful exploit could allow the attacker to retrieve information from and send information to the configuration of the affected Cisco vManage instance. This vulnerability only affects the REST API and does not affect the web-based management interface or the CLI.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco SD-WAN vManage

Vendor
Cisco
Product
Cisco SD-WAN vManage
Platforms
Unknown
Default status
Unknown
Cisco SD-WAN vManage · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20.6.4affectedUnavailableUnavailableUnavailableNone listed
20.6.5affectedUnavailableUnavailableUnavailableNone listed
20.6.5.1affectedUnavailableUnavailableUnavailableNone listed
20.6.4.1affectedUnavailableUnavailableUnavailableNone listed
20.6.5.2affectedUnavailableUnavailableUnavailableNone listed
20.6.5.4affectedUnavailableUnavailableUnavailableNone listed
20.6.3.3affectedUnavailableUnavailableUnavailableNone listed
20.6.4.0.21affectedUnavailableUnavailableUnavailableNone listed
20.6.5.1.10affectedUnavailableUnavailableUnavailableNone listed
20.6.5.1.11affectedUnavailableUnavailableUnavailableNone listed
20.6.5.1.7affectedUnavailableUnavailableUnavailableNone listed
20.6.5.1.9affectedUnavailableUnavailableUnavailableNone listed
20.6.5.2.4affectedUnavailableUnavailableUnavailableNone listed
20.6.5.2.8affectedUnavailableUnavailableUnavailableNone listed
20.6.5.1.13affectedUnavailableUnavailableUnavailableNone listed
20.7.1affectedUnavailableUnavailableUnavailableNone listed
20.7.1.1affectedUnavailableUnavailableUnavailableNone listed
20.7.2affectedUnavailableUnavailableUnavailableNone listed
20.8.1affectedUnavailableUnavailableUnavailableNone listed
20.9.1affectedUnavailableUnavailableUnavailableNone listed
20.9.2affectedUnavailableUnavailableUnavailableNone listed
20.9.2.1affectedUnavailableUnavailableUnavailableNone listed
20.9.3affectedUnavailableUnavailableUnavailableNone listed
20.9.3.1affectedUnavailableUnavailableUnavailableNone listed
20.9.2.3affectedUnavailableUnavailableUnavailableNone listed
20.9.3.0.12affectedUnavailableUnavailableUnavailableNone listed
20.9.3.0.16affectedUnavailableUnavailableUnavailableNone listed
20.9.3.0.17affectedUnavailableUnavailableUnavailableNone listed
20.9.3.0.18affectedUnavailableUnavailableUnavailableNone listed
20.9.3.0.20affectedUnavailableUnavailableUnavailableNone listed
20.9.3.0.21affectedUnavailableUnavailableUnavailableNone listed
20.9.3.0.23affectedUnavailableUnavailableUnavailableNone listed
20.10.1affectedUnavailableUnavailableUnavailableNone listed
20.10.1.1affectedUnavailableUnavailableUnavailableNone listed
20.11.1affectedUnavailableUnavailableUnavailableNone listed
20.11.1.1affectedUnavailableUnavailableUnavailableNone listed