CVE-2020-26074

Cisco SD-WAN vManage Privilege Escalation Vulnerability

Severity Score

7.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track*

*SSVC

Descriptions

A vulnerability in system file transfer functions of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to gain escalated privileges on the underlying operating system.
The vulnerability is due to improper validation of path input to the system file transfer functions. An attacker could exploit this vulnerability by sending requests that contain specially crafted path variables to the vulnerable system. A successful exploit could allow the attacker to overwrite arbitrary files, allowing the attacker to modify the system in such a way that could allow the attacker to gain escalated privileges.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Una vulnerabilidad en las funciones de transferencia de archivos del sistema de Cisco SD-WAN vManage Software podría permitir que un atacante local autenticado obtenga privilegios elevados en el sistema operativo subyacente. La vulnerabilidad se debe a una validación incorrecta de la entrada de ruta a las funciones de transferencia de archivos del sistema. Un atacante podría aprovechar esta vulnerabilidad enviando solicitudes que contengan variables de ruta especialmente diseñadas al sistema vulnerable. Una explotación exitosa podría permitir al atacante sobrescribir archivos arbitrarios, lo que le permitiría modificar el sistema de tal manera que podría permitirle obtener privilegios elevados. Cisco ha publicado actualizaciones de software que solucionan esta vulnerabilidad. No existen workarounds que solucionen esta vulnerabilidad.

*Credits: N/A

CVSS Scores

Ciscov3.1 7.8

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:Track*

Exploitation

None

Automatable

Tech. Impact

Total

* Organization's Worst-case Scenario

Timeline

2020-09-24 CVE Reserved
2024-11-18 CVE Published
2024-11-18 CVE Updated
2024-11-19 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-250: Execution with Unnecessary Privileges

CAPEC

References (2)

URL	Tag	Source
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssl-dos-7uZWwSEy
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-escalation-Jhqs5Skf

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				20.1.12 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.12"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.4.4 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.4"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.4.5 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.5"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				20.1.1.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.1.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				20.1.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.3.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.3.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.2 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.2"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.099 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.099"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.6 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.6"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.7 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.7"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.8 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.8"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.0.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.0.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.1.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.1.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.4.302 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.302"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.4.303 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.303"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.097 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.097"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.098 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.098"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				17.2.10 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.10"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.6.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.6.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.0.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.0.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.2.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.2.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.4.3 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.3"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.4.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				17.2.8 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.8"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.3.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.3.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.4.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				17.2.6 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.6"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				17.2.9 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.9"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.4 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.4"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				17.2.5 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.5"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.1.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.1.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.5 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.5"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.4.0.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.0.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.3 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.3"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				17.2.7 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.7"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				17.2.4 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.4"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.3 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.3"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				20.3.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.3.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				20.1.2 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.2"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.929 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.929"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.31 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.31"		en		Affected