Cisco Patches Vulnerabilities in Catalyst SD-WAN Controller and Manager (advisories.ncsc.nl)

• Four vulnerabilities: XXE injection, privilege escalation, authentication bypass
• Authentication bypass in peering mechanism enables privilege escalation
• Cisco confirms limited exploitation; NCSC expects increased attacks

"Cisco has fixed four vulnerabilities in its Catalyst SD-WAN Controller and Manager products, including XXE injection, privilege escalation, and an authentication bypass. The authentication bypass flaw in the peering mechanism allows unauthenticated attackers to gain elevated privileges and manipulate network configurations. Cisco confirms limited targeted exploitation; the Dutch NCSC expects an increase in scanning and attack traffic."