CVE-2020-3593CWE-269

Cisco SD-WAN Software Privilege Escalation Vulnerability

High · published November 6, 2020

CVSS v3.1
7.8
EPSS
0%
Percentile
20.1
In the wild
Unconfirmed
What it is

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to a utility that is running on an affected system. A successful exploit could allow the attacker to gain root privileges.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00286 · 20.1th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2020-11-06T18:17Z
EPSS history
Timeline
  • 06 NOV 18:17Z
    Cisco SD-WAN Software Privilege Escalation Vulnerability
    cvelistv5