CVE-2018-0343

CVE-2018-0343 is a critical vulnerability in the configuration and management service of Cisco SD-WAN Solution products, including vBond, vEdge routers, vManage, and vSmart, running releases prior to 18.3.0. This flaw stems from insufficient access restrictions to the HTTP management interface. An authenticated, remote attacker can exploit this by sending a malicious HTTP request. Successful exploitation allows for arbitrary code execution with vmanage user privileges or a denial of service condition. With a CVSS score of 8.8 (HIGH), the attack vector is network-based with low attack complexity and no user interaction required, leading to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this vulnerability.