CVE-2020-3264 : A vulnerability in Cisco SD-WAN Solution software could allow an authenticated,

A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to information that they are not authorized to access and make changes to the system that they are not authorized to make.

Published 2020-03-19 16:15:15

Updated 2023-05-23 13:55:46

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Overflow

Products affected by CVE-2020-3264

Cisco » Sd-wan Firmware
Versions before (<) 18.4.5
cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Vedge Cloud Router » Version: N/A
When used together with: Cisco » Vmanage Network Management System » Version: N/A
When used together with: Cisco » Vsmart Controller » Version: N/A
When used together with: Cisco » 1100-4g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltegb Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltena Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-6g Integrated Services Router » Version: N/A
When used together with: Cisco » Vedge 100 » Version: N/A
When used together with: Cisco » Vedge 1000 » Version: N/A
When used together with: Cisco » Vedge 100b » Version: N/A
When used together with: Cisco » Vedge 100m » Version: N/A
When used together with: Cisco » Vedge 100wm » Version: N/A
When used together with: Cisco » Vedge 2000 » Version: N/A
When used together with: Cisco » Vedge 5000 » Version: N/A
Cisco » Sd-wan Firmware
Versions from including (>=) 19.2.0 and before (<) 19.2.2
cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Vedge Cloud Router » Version: N/A
When used together with: Cisco » Vmanage Network Management System » Version: N/A
When used together with: Cisco » Vsmart Controller » Version: N/A
When used together with: Cisco » 1100-4g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltegb Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltena Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-6g Integrated Services Router » Version: N/A
When used together with: Cisco » Vedge 100 » Version: N/A
When used together with: Cisco » Vedge 1000 » Version: N/A
When used together with: Cisco » Vedge 100b » Version: N/A
When used together with: Cisco » Vedge 100m » Version: N/A
When used together with: Cisco » Vedge 100wm » Version: N/A
When used together with: Cisco » Vedge 2000 » Version: N/A
When used together with: Cisco » Vedge 5000 » Version: N/A
Cisco » Sd-wan Firmware » Version: 20.1.0
cpe:2.3:o:cisco:sd-wan_firmware:20.1.0:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Vedge Cloud Router » Version: N/A
When used together with: Cisco » Vmanage Network Management System » Version: N/A
When used together with: Cisco » Vsmart Controller » Version: N/A
When used together with: Cisco » 1100-4g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltegb Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltena Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-6g Integrated Services Router » Version: N/A
When used together with: Cisco » Vedge 100 » Version: N/A
When used together with: Cisco » Vedge 1000 » Version: N/A
When used together with: Cisco » Vedge 100b » Version: N/A
When used together with: Cisco » Vedge 100m » Version: N/A
When used together with: Cisco » Vedge 100wm » Version: N/A
When used together with: Cisco » Vedge 2000 » Version: N/A
When used together with: Cisco » Vedge 5000 » Version: N/A
Cisco » Sd-wan Firmware » Version: 20.3.0
cpe:2.3:o:cisco:sd-wan_firmware:20.3.0:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Vedge Cloud Router » Version: N/A
When used together with: Cisco » Vmanage Network Management System » Version: N/A
When used together with: Cisco » Vsmart Controller » Version: N/A
When used together with: Cisco » 1100-4g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltegb Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltena Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-6g Integrated Services Router » Version: N/A
When used together with: Cisco » Vedge 100 » Version: N/A
When used together with: Cisco » Vedge 1000 » Version: N/A
When used together with: Cisco » Vedge 100b » Version: N/A
When used together with: Cisco » Vedge 100m » Version: N/A
When used together with: Cisco » Vedge 100wm » Version: N/A
When used together with: Cisco » Vedge 2000 » Version: N/A
When used together with: Cisco » Vedge 5000 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-3264

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-3264

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.6	MEDIUM	AV:L/AC:L/Au:N/C:C/I:C/A:N	3.9	9.2	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: None
7.1	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N	1.8	5.2	Cisco Systems, Inc.
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: None
7.1	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N	1.8	5.2	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: None

CWE ids for CVE-2020-3264

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Assigned by: ykramarz@cisco.com (Secondary)
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-3264

https://github.com/orangecertcc/security-research/security/advisories/GHSA-wwq2-pxrj-v62r

Cisco SD-WAN Solution Buffer Overflow Vulnerability (CVE-2020-3264) · Advisory · orangecertcc/security-research · GitHub
Exploit;Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwanbo-QKcABnS2

Cisco SD-WAN Solution Buffer Overflow Vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-3264

Products affected by CVE-2020-3264

Exploit prediction scoring system (EPSS) score for CVE-2020-3264

CVSS scores for CVE-2020-3264

CWE ids for CVE-2020-3264

References for CVE-2020-3264