What’s Vulnerable › Vulnerabilities

CVE-2018-15387: Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-10-05 · updated 2026-06-17
• Weakness: CWE-20

Description

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a system image signed with a crafted certificate to an affected device, bypassing the certificate validation. An exploit could allow an attacker to deploy a crafted system image.

Affected products

• Cisco Sd-Wan: from 17.2.0 before 17.2.8; 18.3.0 — fixed in 17.2.8

How to fix

Upgrade to a fixed version: Cisco Sd-Wan 17.2.8. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/105509
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-sd-wan-bypass
• http://www.securityfocus.com/bid/105509
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-sd-wan-bypass

Get alerted when CVE-2018-15387 or the next vulnerability affects your stack