Ref# Cisco | Date: Mar 20th 2020

---

Cisco has released security updates to address multiple vulnerabilities in SD-WAN Solution software. Software-defined wide-area networks (SD-WANS) utilize software to control the management, connectivity and services between data centers and remote branches or cloud instances (Cooney, 2019).  It is recommended that you take the necessary precautions by ensuring your products are always updated:

• SD-WAN Solution Privilege Escalation Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwpresc-ySJGvE9
• SD-WAN Solution Command Injection https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwclici-cvrQpH9v
• SD-WAN Solution Buffer Overflow Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwanbo-QKcABnS2

The Guyana National CIRT recommends users and administration to review these updates and to apply where necessary.

References

• Cisco Releases Security Updates for SD-WAN Solution Software. (2020, March 19). Retrieved from Us-Cert: https://www.us-cert.gov/ncas/current-activity/2020/03/19/cisco-releases-security-updates-sd-wan-solution-software
• Cooney, M. (2019, October 9). SD-WAN – What it means for enterprise networking, security, cloud computing. Retrieved from Network World: https://www.networkworld.com/article/3031279/sd-wan-what-it-is-and-why-you-ll-use-it-one-day.html