CVE-2020-4000

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 allows for executing files through directory traversal

published November 24, 2020

CVSS
—
EPSS
43%
Percentile
98.7
In the wild
Unconfirmed
What it is

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 allows for executing files through directory traversal. An authenticated SD-WAN Orchestrator user is able to traversal directories which may lead to code execution of files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.43017 · 98.7th percentile
Published
2020-11-24T15:35Z
EPSS history
Timeline
  • 24 NOV 15:35Z
    The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 allows for executing files through directory traversal
    cvelistv5