Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authenticated, local attacker to gain DCA user p…

Cisco Catalyst SD-WAN Manager contains a vulnerability that stores passwords in a recoverable format on the filesystem. This allows authenticated local attackers with low privileges to access credential files and escalate privileges to DCA user level. The vulnerability affects Cisco SD-WAN systems and has prompted CISA to issue emergency directives and mitigation guidance. Organizations are advised to follow CISA's hunt and hardening guidance to secure their SD-WAN infrastructure.