CVE-2020-3374

CVE-2020-3374 is a critical authorization bypass vulnerability in the web-based management interface of Cisco SD-WAN vManage Software. An authenticated, remote attacker can exploit insufficient authorization checking by sending crafted HTTP requests, gaining privileges beyond their assigned user level. This allows them to access sensitive information, modify system configurations, or impact system availability. With a CVSS score of 9.9 (CRITICAL), the attack vector is network-based with low complexity and no user interaction required, leading to high confidentiality, integrity, and availability impacts. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating high awareness despite its inactive status on the CISA KEV and Hot List.