CVE-2020-26074 Cisco SD-WAN vManage Privilege Escalation Vulnerability

High 7.8 Published 18 Nov 2024 Updated 18 Nov 2024

An authenticated local attacker can exploit improper path validation in file transfer functions to overwrite arbitrary files and gain escalated privileges on the underlying operating system.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-26074?

CVE-2020-26074 is a high-severity vulnerability in Cisco Catalyst Sd-Wan Manager, published on 18 Nov 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability in system file transfer functions of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to gain escalated privileges on the underlying operating system. The vulnerability is due to improper validation of path input to the system file transfer functions. An attacker could exploit this vulnerability by sending requests that contain specially crafted path variables to the vulnerable system. A successful exploit could allow the attacker to overwrite arbitrary files, allowing the attacker to modify the system in such a way that could allow the attacker to gain escalated privileges.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Weakness: CWE-250

Which versions are affected by CVE-2020-26074?

It affects 1 product.

Products include Cisco Catalyst Sd-Wan Manager.

How do I fix CVE-2020-26074?

No fix has been published for CVE-2020-26074 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-26074 being exploited?

There is no known exploitation of CVE-2020-26074 in the wild and no public exploit code.

All Cisco Catalyst Sd-Wan Manager vulnerabilities

Sources

Also known as GHSA-9cj6-mqj9-659v.