Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-3375

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to information that they are not authorized to access, make changes to the system that they are not authorized to make, and execute commands on an affected system with privileges of the root user.

Published

2020-07-31T00:15:12.850

Last Modified

2024-11-21T05:30:54.447

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Secondary
    CWE-119
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco sd-wan ≤ 18.3.0 Yes
Application cisco sd-wan < 18.4.5 Yes
Application cisco sd-wan < 19.2.2 Yes
Application cisco sd-wan < 20.1.1 Yes
Operating System cisco ios_xe_sd-wan ≤ 16.9.0 Yes
Operating System cisco ios_xe_sd-wan ≤ 16.12.4 Yes
Operating System cisco ios_xe_sd-wan ≤ 17.2.1 Yes
References