Cisco Security Advisory Cisco SD-WAN Solution Command Injection Vulnerability High Advisory ID: cisco-sa-20180718-sdwan-coinj First Published: 2018 July 18 16:00 GMT Version 1.0: Final Workarounds: No workarounds available Cisco Bug IDs: CSCvi69751 CVE-2018-0351 CWE-77 CVSS Score: Base 7.8. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the tcpdump utility.”]
Source: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-sdwan-coinj