CVE-2020-3265: cisco sd-wan firmware

csirt@kutim:~/threat-intel/cve/CVE-2020-3265

CVSS 7.8 · High EPSS 0,38%

Kerentanan Permissions, Privileges, and Access Controls pada cisco sd-wan firmware. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to gain root-level privileges.

Rincian

Terbit di NVD: 19 Maret 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-264: Permissions, Privileges, and Access Controls
CWE-269: Improper Privilege Management
EPSS (30 hari): 0,38% peluang dieksploitasi; lebih tinggi dari 30,4% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
cisco	sd-wan firmware	Semua versi sebelum 18.4.5
cisco	sd-wan firmware	Versi 19.2.0 hingga sebelum 19.2.2
cisco	sd-wan firmware	Versi 20.1.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwpresc-ySJGvE9 advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.