This vulnerability in Cisco Catalyst SD-WAN Manager arises from insufficient file system restrictions, enabling an authenticated attacker with netadmin privileges to access the vshell and read sensitive information from the underlying OS. It affects numerous versions of the software ranging from 17.2.4 through 20.18.2. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact.

An attacker with netadmin privileges on the affected system can exploit this vulnerability to read sensitive information from the underlying operating system. This could lead to unauthorized disclosure of confidential data. There is no indication of integrity or availability impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the Cisco vendor advisory for current remediation guidance. Since the vulnerability requires netadmin privileges and access to vshell, limiting access to authorized administrators and monitoring privileged accounts is recommended until an official fix is available.