Cisco Catalyst SD-WAN Controller Authentication Bypass | MSSP Advisory

CISA added a maximum-severity authentication bypass vulnerability in Cisco Catalyst SD-WAN Controller to their Known Exploited Vulnerabilities list. The flaw allows attackers to completely bypass authentication controls and gain unauthorized access to the management interface. Active exploitation is confirmed in the wild.

SD-WAN controllers manage network routing and security policies across your entire client base, making them crown jewel targets for lateral movement. Your clients trust you to monitor their network infrastructure, and an authentication bypass on their primary WAN controller means total network compromise before you even see the first alert.

📬