CVE-2020-3374 Cisco SD-WAN vManage Software Authorization Bypass Vulnerability
Authenticated attackers can bypass authorization checks in Cisco SD-WAN vManage to access sensitive data, modify configurations, or disrupt availability.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-3374?
CVE-2020-3374 is a critical missing authorization vulnerability in Cisco SD-WAN vManage, published on 31 Jul 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization, enabling them to access sensitive information, modify the system configuration, or impact the availability of the affected system. The vulnerability is due to insufficient authorization checking on the affected system. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected system. A successful exploit could allow the attacker to gain privileges beyond what would normally be authorized for their configured user authorization level. The attacker may be able to access sensitive information, modify the system configuration, or impact the availability of the affected system.
Which versions are affected by CVE-2020-3374?
It affects 1 product.
Products include Cisco Sd-Wan.
How do I fix CVE-2020-3374?
No fix has been published for CVE-2020-3374 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2020-3374 being exploited?
There is no known exploitation of CVE-2020-3374 in the wild and no public exploit code.
Other vulnerabilities in Cisco SD-WAN vManage
- CVE-2018-15387 Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability
- CVE-2019-1624 Cisco SD-WAN Solution Command Injection Vulnerability
- CVE-2019-1650 Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability
- CVE-2020-3180 Cisco SD-WAN Solution Software Static Credentials Vulnerability
- CVE-2019-1647 Cisco SD-WAN Solution Unauthorized Access Vulnerability
Sources
Also known as GHSA-wr3q-48h2-426r.