CVE-2020-3593 - Cisco SD-WAN Software Privilege Escalation Vulnerability

Back Back to CVE browser

HIGH

Cisco SD-WAN Software Privilege Escalation Vulnerability

Published Nov 6, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.29%

Description

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to a utility that is running on an affected system. A successful exploit could allow the attacker to gain root privileges.

Affected products

Vendor Cisco Product Cisco SD-WAN Solution Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cisco

Cisco SD-WAN Solution

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-24864
Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vepescm-BjgQm4vJ
vendor-advisoryx_refsource_CISCOPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-24864		Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vepescm-BjgQm4vJ		vendor-advisoryx_refsource_CISCOPatchVendor Advisory