This vulnerability in Cisco Catalyst SD-WAN Controller's peering authentication mechanism allows an unauthenticated remote attacker to bypass authentication controls. The flaw exists because the peering authentication does not function correctly during control connection handshaking. Successful exploitation grants the attacker administrative-level access as a high-privileged internal user (non-root), enabling access to NETCONF interfaces and the ability to alter SD-WAN fabric network configurations. The vulnerability affects multiple versions of Cisco Catalyst SD-WAN Controller, including formerly named SD-WAN vSmart, vManage, and vBond components. The advisory includes guidance on system checks via Show Control Connections commands but does not specify patch availability.

An attacker exploiting this vulnerability can gain unauthorized administrative access to the Cisco Catalyst SD-WAN Controller. This access allows manipulation of network configurations through NETCONF, potentially disrupting SD-WAN fabric operations and compromising network integrity, confidentiality, and availability. The CVSS 3.1 base score is 10.0 (critical), reflecting the vulnerability's ease of exploitation (network vector, no privileges or user interaction required) and its severe impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, administrators should follow Cisco's guidance on Show Control Connections to monitor system status and potentially detect exploitation attempts. No official patch or temporary fix information is provided in the current advisory.