CVE-2020-3379

Cisco SD-WAN Solution Software Privilege Escalation Vulnerability

Medium · published July 16, 2020

CVSS v3.0
5.3
EPSS
0%
Percentile
27.5
In the wild
Unconfirmed
What it is

A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated, local attacker to elevate privileges to Administrator on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to gain administrative privileges.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00351 · 27.5th percentile
Published
2020-07-16T17:21Z
EPSS history
Timeline
  • 16 JUL 17:21Z
    Cisco SD-WAN Solution Software Privilege Escalation Vulnerability
    cvelistv5