CVE-2020-3401 : A vulnerability in the web-based management interface of Cisco SD-WAN vManage So

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain read access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to the affected system. A successful exploit could allow the attacker to view arbitrary files on the affected system.

Published 2020-07-16 18:15:19

Updated 2023-05-23 13:55:46

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Directory traversal

Products affected by CVE-2020-3401

Cisco » Sd-wan Firmware
Versions up to, including, (<=) 19.2.2
cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 1100-4g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltegb Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltena Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-6g Integrated Services Router » Version: N/A
When used together with: Cisco » Vedge 100 » Version: N/A
When used together with: Cisco » Vedge 1000 » Version: N/A
When used together with: Cisco » Vedge 100b » Version: N/A
When used together with: Cisco » Vedge 100m » Version: N/A
When used together with: Cisco » Vedge 100wm » Version: N/A
When used together with: Cisco » Vedge 2000 » Version: N/A
When used together with: Cisco » Vedge 5000 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-3401

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 17 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-3401

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.0	MEDIUM	AV:N/AC:L/Au:S/C:P/I:N/A:N	8.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
6.5	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	2.8	3.6	Cisco Systems, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	2.8	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2020-3401

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Assigned by:
- nvd@nist.gov (Primary)
- ykramarz@cisco.com (Secondary)

References for CVE-2020-3401

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmandowndir-CVGvdKM3

Cisco SD-WAN vManage Software Path Traversal Vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-3401

Products affected by CVE-2020-3401

Exploit prediction scoring system (EPSS) score for CVE-2020-3401

CVSS scores for CVE-2020-3401

CWE ids for CVE-2020-3401

References for CVE-2020-3401