VDB

CVE-2020-3387

CVE-2020-3387 PUBLISHED CVSS 7.5 HIGH

A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to execute code with root privileges on an affected system. The vulnerability is due to insufficient input sanitization during user authentication processing. An attacker could exploit this vulnerability by sending a crafted response to the Cisco SD-WAN vManage Software. A successful exploit could allow the attacker to access the software and execute commands they should not be authorized to execute.

EPSS 39.18% · 97.4th percentile

Risk Scores

CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
39.18%
97.4th percentile

Affected Products

VendorProductVersions
ciscosd-wan_firmware18.4.0, 19.3.0, 0
CiscoCisco SD-WAN vManagen/a

Exploit Intelligence

Timeline

  • Jul 15, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 3, 2021 PoC Published
  • Jun 23, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Oct 10, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 28, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›