Vulnerability record · CVE-2018-15387 · published 5 October 2018

CVE-2018-15387: Cisco sd-wan improper input validation vulnerability

Cisco · Sd Wan

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a system image signed with a crafted certificate to an affected device, bypassing the certificate validation. An exploit could allow an attacker to deploy a crafted system image.

9.8 CVSS 3.1 Critical EPSS 1.1% · top 35.7% CWE-20 · Improper input validationCWE-295 · Improper certificate validation

9.8CVSS 3.1 base score, v2 7.5

1.1%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

4References

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Sd Wan Cisco

References

Link	Tags
http://www.securityfocus.com/bid/105509	Third Party AdvisoryVDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-sd-wan-bypass	Vendor Advisory
http://www.securityfocus.com/bid/105509	Third Party AdvisoryVDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-sd-wan-bypass	Vendor Advisory

Track CVE-2018-15387 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2022-20775Cisco SD-WAN CLI access control flaw allows root privilege escalationCisco SD-WAN Software has improper access controls on commands within the application CLI, letting an authenticated local attacker run a crafted comm…KEVEPSS 12%analysed30 Sep 2022 9.9CVE-2020-3374Cisco sd-wan improper authorization vulnerabilityA vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass author…EPSS 1.9%31 Jul 2020 9.8CVE-2020-3375Cisco sd-wan memory buffer overflow vulnerabilityA vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. T…EPSS 3.9%31 Jul 2020 8.8CVE-2019-1624Cisco sd-wan command injection vulnerabilityA vulnerability in the vManage web-based UI (Web UI) in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary c…EPSS 4.3%20 Jun 2019 8.8CVE-2019-1650Cisco vedge 100 firmware improper input validation vulnerabilityA vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating s…EPSS 3.5%24 Jan 2019 8.1CVE-2023-20113Cisco sd-wan cross-site request forgery vulnerabilityA vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a c…EPSS 0.26%23 Mar 2023 8.0CVE-2019-1647Cisco sd-wan improper access control vulnerabilityA vulnerability in the Cisco SD-WAN Solution could allow an authenticated, adjacent attacker to bypass authentication and have direct unauthorized ac…EPSS 0.81%24 Jan 2019 7.8CVE-2022-20818Cisco sd-wan vbond orchestrator path traversal vulnerabilityMultiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerab…EPSS 0.63%30 Sep 2022

Source: NIST National Vulnerability Database (record CVE-2018-15387), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.