#VU32920 Improper Authorization in Cisco SD-WAN vManage - CVE-2020-3374

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU32920

#VU32920 Improper Authorization in Cisco SD-WAN vManage - CVE-2020-3374

Published: July 30, 2020


Vulnerability identifier: #VU32920
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2020-3374
CWE-ID: CWE-285
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Cisco SD-WAN vManage
Software vendor:
Cisco Systems, Inc

Description

The vulnerability allows a remote attacker to bypass authorization checks.

The vulnerability exists due to insufficient authorization checking on the affected system. A remote authenticated attacker can send specially crafted HTTP requests and gain privileges beyond what would normally be authorized for their configured user authorization level.


Remediation

Install updates from vendor's website.

External links