{ "document" : { "aggregate_severity" : { "text" : "kritisch" }, "category" : "csaf_base", "csaf_version" : "2.0", "distribution" : { "tlp" : { "label" : "WHITE", "url" : "https://www.first.org/tlp/" } }, "lang" : "de-DE", "notes" : [ { "category" : "legal_disclaimer", "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen." }, { "category" : "description", "text" : "Catalyst ist der Markenname für eine Vielzahl von Netzwerk-Switches die von Cisco Systems verkauft werden.", "title" : "Produktbeschreibung" }, { "category" : "summary", "text" : "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Catalyst SD-WAN Controller ausnutzen, um Administratorrechte zu erlangen und so die Netzwerkkonfiguration für die SD-WAN-Struktur zu manipulieren.", "title" : "Angriff" }, { "category" : "general", "text" : "- Sonstiges", "title" : "Betroffene Betriebssysteme" } ], "publisher" : { "category" : "other", "contact_details" : "csaf-provider@cert-bund.de", "name" : "Bundesamt für Sicherheit in der Informationstechnik", "namespace" : "https://www.bsi.bund.de" }, "references" : [ { "category" : "self", "summary" : "WID-SEC-W-2026-1534 - CSAF Version", "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1534.json" }, { "category" : "self", "summary" : "WID-SEC-2026-1534 - Portal Version", "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1534" }, { "category" : "external", "summary" : "Cisco Security Advisory cisco-sa-sdwan-rpa2-v69WY2SW vom 2026-05-14", "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW" }, { "category" : "external", "summary" : "CISA KEV: CVE-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability vom 2026-05-14", "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" } ], "source_lang" : "en-US", "title" : "Cisco Catalyst SD-WAN Controller: Schwachstelle ermöglicht Erlangen von Administratorrechten", "tracking" : { "current_release_date" : "2026-05-14T22:00:00.000+00:00", "generator" : { "date" : "2026-05-15T09:59:23.018+00:00", "engine" : { "name" : "BSI-WID", "version" : "1.5.0" } }, "id" : "WID-SEC-W-2026-1534", "initial_release_date" : "2026-05-14T22:00:00.000+00:00", "revision_history" : [ { "date" : "2026-05-14T22:00:00.000+00:00", "number" : "1", "summary" : "Initiale Fassung" } ], "status" : "final", "version" : "1" } }, "product_tree" : { "branches" : [ { "branches" : [ { "branches" : [ { "category" : "product_version_range", "name" : "SD-WAN Controller <26.1.1.1", "product" : { "name" : "Cisco Catalyst SD-WAN Controller <26.1.1.1", "product_id" : "T054158" } }, { "category" : "product_version", "name" : "SD-WAN Controller 26.1.1.1", "product" : { "name" : "Cisco Catalyst SD-WAN Controller 26.1.1.1", "product_id" : "T054158-fixed", "product_identification_helper" : { "cpe" : "cpe:/h:cisco:catalyst:sd-wan_controller__26.1.1.1" } } }, { "category" : "product_version_range", "name" : "SD-WAN Controller <20.18.2.2", "product" : { "name" : "Cisco Catalyst SD-WAN Controller <20.18.2.2", "product_id" : "T054159" } }, { "category" : "product_version", "name" : "SD-WAN Controller 20.18.2.2", "product" : { "name" : "Cisco Catalyst SD-WAN Controller 20.18.2.2", "product_id" : "T054159-fixed", "product_identification_helper" : { "cpe" : "cpe:/h:cisco:catalyst:sd-wan_controller__20.18.2.2" } } }, { "category" : "product_version_range", "name" : "SD-WAN Controller <20.15.4.4", "product" : { "name" : "Cisco Catalyst SD-WAN Controller <20.15.4.4", "product_id" : "T054160" } }, { "category" : "product_version", "name" : "SD-WAN Controller 20.15.4.4", "product" : { "name" : "Cisco Catalyst SD-WAN Controller 20.15.4.4", "product_id" : "T054160-fixed", "product_identification_helper" : { "cpe" : "cpe:/h:cisco:catalyst:sd-wan_controller__20.15.4.4" } } }, { "category" : "product_version_range", "name" : "SD-WAN Controller <20.15.5.2", "product" : { "name" : "Cisco Catalyst SD-WAN Controller <20.15.5.2", "product_id" : "T054161" } }, { "category" : "product_version", "name" : "SD-WAN Controller 20.15.5.2", "product" : { "name" : "Cisco Catalyst SD-WAN Controller 20.15.5.2", "product_id" : "T054161-fixed", "product_identification_helper" : { "cpe" : "cpe:/h:cisco:catalyst:sd-wan_controller__20.15.5.2" } } }, { "category" : "product_version_range", "name" : "SD-WAN Controller <20.12.6.2", "product" : { "name" : "Cisco Catalyst SD-WAN Controller <20.12.6.2", "product_id" : "T054162" } }, { "category" : "product_version", "name" : "SD-WAN Controller 20.12.6.2", "product" : { "name" : "Cisco Catalyst SD-WAN Controller 20.12.6.2", "product_id" : "T054162-fixed", "product_identification_helper" : { "cpe" : "cpe:/h:cisco:catalyst:sd-wan_controller__20.12.6.2" } } }, { "category" : "product_version_range", "name" : "SD-WAN Controller <20.12.5.4", "product" : { "name" : "Cisco Catalyst SD-WAN Controller <20.12.5.4", "product_id" : "T054163" } }, { "category" : "product_version", "name" : "SD-WAN Controller 20.12.5.4", "product" : { "name" : "Cisco Catalyst SD-WAN Controller 20.12.5.4", "product_id" : "T054163-fixed", "product_identification_helper" : { "cpe" : "cpe:/h:cisco:catalyst:sd-wan_controller__20.12.5.4" } } }, { "category" : "product_version_range", "name" : "SD-WAN Controller <20.12.7.1", "product" : { "name" : "Cisco Catalyst SD-WAN Controller <20.12.7.1", "product_id" : "T054164" } }, { "category" : "product_version", "name" : "SD-WAN Controller 20.12.7.1", "product" : { "name" : "Cisco Catalyst SD-WAN Controller 20.12.7.1", "product_id" : "T054164-fixed", "product_identification_helper" : { "cpe" : "cpe:/h:cisco:catalyst:sd-wan_controller__20.12.7.1" } } }, { "category" : "product_version_range", "name" : "SD-WAN Controller <20.9.9.1", "product" : { "name" : "Cisco Catalyst SD-WAN Controller <20.9.9.1", "product_id" : "T054165" } }, { "category" : "product_version", "name" : "SD-WAN Controller 20.9.9.1", "product" : { "name" : "Cisco Catalyst SD-WAN Controller 20.9.9.1", "product_id" : "T054165-fixed", "product_identification_helper" : { "cpe" : "cpe:/h:cisco:catalyst:sd-wan_controller__20.9.9.1" } } } ], "category" : "product_name", "name" : "Catalyst" } ], "category" : "vendor", "name" : "Cisco" } ] }, "vulnerabilities" : [ { "cve" : "CVE-2026-20182", "product_status" : { "known_affected" : [ "T054165", "T054164", "T054163", "T054162", "T054161", "T054160", "T054159", "T054158" ] }, "release_date" : "2026-05-14T22:00:00.000+00:00", "title" : "CVE-2026-20182" } ] }