← Back

CVE-2020-3115

nvd nist
Published: Jan 26, 2020Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Exploitability: 2.0 / Impact: 6.0
Source: NVD

Description

A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to elevate privileges to root-level privileges on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted file to the affected system. An exploit could allow the attacker to elevate privileges to root-level privileges.

Affected (2)

Cisco
1 product
Sd Wan Firmware
Configuration A
2 vulnerable · 7 platform
Vulnerable SoftwareAffected Versions
Cisco
Sd Wan Firmware
Version 18.4.1
Sd Wan Firmware
Version 19.1.0
Running on/withPlatform Versions
Cisco
Vedge 100
All versions
Cisco
Vedge 1000
All versions
Cisco
Vedge 100b
All versions
Cisco
Vedge 2000
All versions
Cisco
Vedge 5000
All versions
Cisco
Vedge 100m
All versions
Cisco
Vedge 100wm
All versions

Related CWEs

CWE-264
CWE-264
CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.