Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-3264

A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to information that they are not authorized to access and make changes to the system that they are not authorized to make.

Published

2020-03-19T16:15:15.487

Last Modified

2024-11-21T05:30:41.157

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.1 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:N

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: NONE
Exploitability Score

3.9

Impact Score

9.2

Weaknesses
  • Type: Secondary
    CWE-119
  • Type: Primary
    CWE-120
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco sd-wan_firmware < 18.4.5 Yes
Operating System cisco sd-wan_firmware < 19.2.2 Yes
Operating System cisco sd-wan_firmware 20.1.0 Yes
Operating System cisco sd-wan_firmware 20.3.0 Yes
Application cisco vedge_cloud_router - No
Application cisco vmanage_network_management_system - No
Application cisco vsmart_controller - No
Hardware cisco 1100-4g_integrated_services_router - No
Hardware cisco 1100-4gltegb_integrated_services_router - No
Hardware cisco 1100-4gltena_integrated_services_router - No
Hardware cisco 1100-6g_integrated_services_router - No
Hardware cisco vedge_100 - No
Hardware cisco vedge_1000 - No
Hardware cisco vedge_100b - No
Hardware cisco vedge_100m - No
Hardware cisco vedge_100wm - No
Hardware cisco vedge_2000 - No
Hardware cisco vedge_5000 - No
References