Cisco SD-WAN Solution Privilege Escalation Vulnerability
A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to gain root-level privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-3265US | high7.8 | — | ||
A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability i… | ||||
references
External citations — patches, advisories, analysis.
- Cisco SD-WAN Solution Privilege Escalation Vulnerabilityself
- Cisco Security Vulnerability Policyexternal
- considering software upgradesexternal
- Software Centerexternal
- https://www.cisco.com/c/en/us/products/end-user-license-agreement.htmlexternal
- https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.htmlexternal
- Cisco Security Advisories and Alerts pageexternal
remediations (1)
- No fix availableCisco Catalyst SD-WAN
No remediation is available at this time.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan