CVE-2020-3265

Cisco SD-WAN Solution Privilege Escalation Vulnerability

High · published March 19, 2020

CVSS v3.0
7.0
EPSS
0%
Percentile
31.1
In the wild
Unconfirmed
What it is

A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to gain root-level privileges.

The record
Technical detail
CVSS v3.0
7.0 · HIGH
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00383 · 31.1th percentile
Published
2020-03-19T15:35Z
EPSS history
Timeline
  • 19 MAR 15:35Z
    Cisco SD-WAN Solution Privilege Escalation Vulnerability
    cvelistv5