writeups.xyz / SD-PWN — Part 3 — Cisco vManage — Another Day, Another Network Takeover

Submitter : c2a

Date: 23 November 2020

Bounty : undisclosed

Vulnerabilities :

• RCE
• SSRF
• Arbitrary File Write
• Path Traversal
• OS Command Injection
• Local Privilege Escalation

Programs :

• Cisco

Authors :

• Realmode Labs (@RealmodeLabs)

Link :
https://medium.com/realmodelabs/sd-pwn-part-3-cisco-vmanage-another-day-another-network-takeover-15731a4d75b7