This vulnerability in the peering authentication mechanism of Cisco Catalyst SD-WAN Controller and Manager allows an unauthenticated remote attacker to bypass authentication. By sending crafted requests, the attacker can log in as a high-privileged internal user, gaining administrative access to the system and NETCONF interface, which controls network configuration for the SD-WAN fabric. The flaw exists due to improper functioning of the peering authentication process. Multiple product versions are affected. No vendor-provided patch or official remediation level is currently documented.

Successful exploitation results in complete compromise of the affected Cisco SD-WAN system, including administrative access and full control over network configuration via NETCONF. This can lead to unauthorized changes in network behavior, potentially disrupting operations or enabling further attacks. The CVSS base score of 10.0 reflects critical impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should monitor Cisco advisories closely and consider limiting network exposure of affected systems. No vendor advisory content is provided indicating that the issue is already mitigated or that no action is required.