CVE-2020-3593 is a privilege escalation vulnerability in Cisco SD-WAN Software, stemming from insufficient input validation. An authenticated, local attacker can exploit this by sending a crafted request to a utility, gaining root privileges on the underlying operating system. Rated 7.8 HIGH on CVSS, it requires local access but has low attack complexity, leading to high impact on confidentiality, integrity, and availability. Currently, there is no public exploit code, active exploitation, or significant community discussion, indicating low immediate threat.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 20.1.2CPE matchmatch criteria | cpe:2.3:a:cisco:sd-wan:*:*:*:*:*:*:*:* | ||
>= 20.3, < 20.3.1CPE matchmatch criteria | cpe:2.3:a:cisco:sd-wan:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.