vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-20254

HIGH
8.8
CVSS Score
Published: September 27, 2023 at 05:11 PM UTC
Updated: June 17, 2026 at 05:30 AM UTC
3 products affected across 1 vendorSd WAN ManagerCatalyst Sd WAN ManagerCisco SD-WAN vManage

Using Cisco SD-WAN vManage by Cisco?

Get instant alerts when new vulnerabilities affect Cisco SD-WAN vManage - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.8
Exploit prediction
EPSS 0.8%
SSVC
No known exploit

Description

A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow an authenticated, remote attacker to access another tenant that is being managed by the same Cisco Catalyst SD-WAN Manager instance. This vulnerability requires the multi-tenant feature to be enabled. This vulnerability is due to insufficient user session management within the Cisco Catalyst SD-WAN Manager system. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to gain unauthorized access to information about another tenant, make configuration changes, or possibly take a tenant offline causing a denial of service condition.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Sd WAN Manager· Cisco
95%
v < 20.6.3.420.10 ≤ v < 20.10.1.220.11 ≤ v < 20.11.1.220.7 ≤ v < 20.9.3.2
Affected range stops below 20.10.1.2, so it looks safe — our inference, not a vendor statement
Affected range stops below 20.11.1.2, so it looks safe — our inference, not a vendor statement
Affected range stops below 20.6.3.4, so it looks safe — our inference, not a vendor statement
Affected range stops below 20.9.3.2, so it looks safe — our inference, not a vendor statement
Catalyst Sd WAN Manager· Cisco
60%
17.2.10 ≤ v ≤ 20.9.3.117.2.10
Cisco SD-WAN vManage· Cisco
60%
17.2.1017.2.417.2.517.2.617.2.717.2.817.2.918.2.018.3.018.3.118.3.1.118.3.318.3.3.118.3.418.3.518.3.6.118.3.718.3.818.4.018.4.0.118.4.118.4.318.4.30218.4.30318.4.418.4.518.4.619.1.019.2.019.2.09719.2.09919.2.119.2.219.2.319.2.3119.2.419.2.92919.3.020.1.120.1.1.120.1.1220.1.220.1.320.10.120.10.1.120.3.120.3.220.3.2.120.3.320.3.3.120.3.420.3.4.120.3.4.220.3.4.320.3.520.3.5.120.3.620.3.720.3.7.120.3.7.220.4.120.4.1.120.4.1.220.4.220.4.2.120.4.2.220.4.2.320.5.120.5.1.120.5.1.220.6.120.6.1.120.6.1.220.6.220.6.2.120.6.2.220.6.320.6.3.0.4520.6.3.0.4620.6.3.0.4720.6.3.120.6.3.220.6.3.320.7.120.7.1.120.7.220.8.120.9.120.9.220.9.2.120.9.2.320.9.320.9.3.0.1220.9.3.0.1620.9.3.0.1720.9.3.0.1820.9.3.0.2020.9.3.0.2120.9.3.0.2320.9.3.1

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

PatchVendor Advisory
Source: [email protected]
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-sc-LRLfu2z

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.8HIGH[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-732

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card