Threats Tagged 'cve-2023-20254'
View all threats tagged with 'cve-2023-20254'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2023-20254'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2023-20254 is a high-severity vulnerability in Cisco SD-WAN vManage affecting its multi-tenant session management. An authenticated remote attacker with access to the system can exploit insufficient session management to access or manipulate another tenant's data and configurations. Exploitation requires the multi-tenant feature to be enabled and does not require user interaction but does require authentication. Successful exploitation can lead to unauthorized data disclosure, configuration changes, or denial of service for affected tenants. The vulnerability affects numerous versions of Cisco SD-WAN vManage, spanning multiple major releases. No known exploits are currently reported in the wild. The CVSS score is 7.2, reflecting high impact on confidentiality, integrity, and availability with relatively low attack complexity. European organizations using Cisco SD-WAN with multi-tenant setups should prioritize patching or mitigating this vulnerability to prevent cross-tenant compromise and service disruption. Join the discussion | CVE Database V5 | 09/27/2023, 17:11:23 UTC Added: 12/16/2025, 17:18:48 UTC |
Showing 1 to 1 of 1 result