【資安漏洞預警】Cisco Catalyst SD-WAN 存在4個重大資安漏洞

【行政公告】

公告單位	圖資處網路系統組
訊息類別	行政公告行政公告	公告對象	全體
公告主題	【資安漏洞預警】Cisco Catalyst SD-WAN 存在4個重大資安漏洞【Security Vulnerability Alert】Cisco Catalyst SD-WAN has 4 critical security vulnerabilities
公告內容	轉發台灣電腦網路危機處理暨協調中心資安訊息警訊 TWCERTCC-200-202608-00000005 [內容說明] Cisco Catalyst SD-WAN 是 Cisco 以雲端為中心的軟體定義廣域網路架構，提供集中管理、安全加密及應用效能優化，確保多雲環境的可靠連線。Catalyst SD-WAN 軟體開發團隊於內部安全審查期間發現多項安全漏洞，並已完成修補。目前尚未發現有證據顯示這些漏洞遭到積極利用。為協助客戶及時部署安全更新並簡化漏洞揭露流程，Cisco 已公開相關漏洞資訊及修補建議。 CVE-2026-20303(CVSS：9.9)為輸入驗證不當漏洞；CVE-2026-20304(CVSS：9.9)為存取控制不當漏洞；CVE-2026-20310(CVSS：9.9)為文件存取前連結解析不正確；CVE-2026-20312(CVSS：8.8)為以明文形式儲存敏感資訊。 [影響平台] Cisco Catalyst SD-WAN 20.9(含)之前版本、 Cisco Catalyst SD-WAN 20.10 版本、 Cisco Catalyst SD-WAN 20.11 版本、 Cisco Catalyst SD-WAN 20.12 版本、 Cisco Catalyst SD-WAN 20.13 版本、 Cisco Catalyst SD-WAN 20.14 版本、 Cisco Catalyst SD-WAN 20.15 版本、 Cisco Catalyst SD-WAN 20.16 版本、 Cisco Catalyst SD-WAN 20.18 版本、 Cisco Catalyst SD-WAN 26.1 版本 [建議措施] 請更新至以下版本： Cisco Catalyst SD-WAN 20.9.10(含)之後版本、 Cisco Catalyst SD-WAN 20.12.8.1(含)之後版本、 Cisco Catalyst SD-WAN 20.15.6(含)之後版本、 Cisco Catalyst SD-WAN 20.18.4(含)之後版本、 Cisco Catalyst SD-WAN 26.1.2(含)之後版本 [參考資料] 1. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-sdwan-faLcR3K 2. https://nvd.nist.gov/vuln/detail/CVE-2026-20303 3. https://nvd.nist.gov/vuln/detail/CVE-2026-20304 4. https://nvd.nist.gov/vuln/detail/CVE-2026-20310 5. https://nvd.nist.gov/vuln/detail/CVE-2026-20312 Forwarded Taiwan Computer Network Emergency Response Team/Coordination Center Information Security Alert TWCERTCC-200-202608-00000005 [Content Description] Cisco Catalyst SD-WAN is Cisco's cloud-centric software-defined wide area network architecture, providing centralized management, secure encryption, and application performance optimization to ensure reliable connectivity in multi-cloud environments. The Catalyst SD-WAN software development team discovered multiple security vulnerabilities during an internal security review and has completed remediation. Currently, there is no evidence that these vulnerabilities have been actively exploited. To help customers deploy security updates in a timely manner and simplify the vulnerability disclosure process, Cisco has publicly disclosed the relevant vulnerability information and remediation recommendations. CVE-2026-20303(CVSS: 9.9) is an Improper Input Validation vulnerability; CVE-2026-20304(CVSS: 9.9) is an Improper Access Control vulnerability; CVE-2026-20310(CVSS: 9.9) is an Incorrect Link Resolution Before File Access vulnerability; CVE-2026-20312(CVSS: 8.8) is an Exposure of Sensitive Information in Cleartext vulnerability. [Impacted Platform] Cisco Catalyst SD-WAN versions 20.9(inclusive) and earlier, Cisco Catalyst SD-WAN version 20.10, Cisco Catalyst SD-WAN version 20.11, Cisco Catalyst SD-WAN version 20.12, Cisco Catalyst SD-WAN version 20.13, Cisco Catalyst SD-WAN version 20.14, Cisco Catalyst SD-WAN version 20.15, Cisco Catalyst SD-WAN version 20.16, Cisco Catalyst SD-WAN version 20.18, Cisco Catalyst SD-WAN version 26.1 [Recommended Actions] Please update to the following versions: Cisco Catalyst SD-WAN 20.9.10(inclusive) or later versions, Cisco Catalyst SD-WAN 20.12.8.1(inclusive) or later versions, Cisco Catalyst SD-WAN 20.15.6(inclusive) or later versions, Cisco Catalyst SD-WAN 20.18.4(inclusive) or later versions, Cisco Catalyst SD-WAN 26.1.2(inclusive) or later versions [Reference] 1. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-sdwan-faLcR3K 2. https://nvd.nist.gov/vuln/detail/CVE-2026-20303 3. https://nvd.nist.gov/vuln/detail/CVE-2026-20304 4. https://nvd.nist.gov/vuln/detail/CVE-2026-20310 5. https://nvd.nist.gov/vuln/detail/CVE-2026-20312
相關訊息
公告時間	2026/8/13 至 2027/2/13	點閱次數	182