جزئیات آسیبپذیری
CVE-2020-26071
Cisco Catalyst SD-WAN ManagerCisco SD-WAN vContainerCisco SD-WAN vEdge CloudCisco SD-WAN vEdge Router
Cisco SD-WAN vEdge Arbitrary File Creation Vulnerability
CVSS 3.1
8.4بالا
شرح رسمی (انگلیسی)
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overwrite arbitrary files on an affected device, which could result in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation for specific commands. An attacker could exploit this vulnerability by including crafted arguments to those specific commands. A successful exploit could allow the attacker to create or overwrite arbitrary files on the affected device, which could result in a DoS condition.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.4بالا | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H/RL:X/RC:X/E:X |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.6.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.302 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.303 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.501_ES | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.0.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.0.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.1.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.097 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.098 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.099 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.1.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.1.12 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 17.2.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 17.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 17.2.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 17.2.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 17.2.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 17.2.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 17.2.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 18.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 18.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 18.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 18.3.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 18.3.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 18.3.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 18.3.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 18.3.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 18.3.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 18.4.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 18.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 18.4.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 18.4.302 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 18.4.303 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 18.4.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 18.4.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 19.1.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 19.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 19.2.097 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 19.2.098 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 19.2.099 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 19.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 19.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 19.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 19.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 20.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vContainer | 20.1.12 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 17.2.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 17.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 17.2.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 17.2.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 17.2.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 17.2.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 17.2.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 18.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 18.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 18.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 18.3.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 18.3.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 18.3.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 18.3.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 18.3.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 18.3.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 18.4.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 18.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 18.4.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 18.4.302 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 18.4.303 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 18.4.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 18.4.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 19.0.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 19.1.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 19.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 19.2.097 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 19.2.098 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 19.2.099 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 19.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 19.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 19.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 19.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 20.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Cloud | 20.1.12 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 17.2.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 17.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 17.2.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 17.2.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 17.2.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 17.2.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 17.2.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 18.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 18.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 18.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 18.3.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 18.3.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 18.3.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 18.3.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 18.3.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 18.3.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 18.4.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 18.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 18.4.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 18.4.302 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 18.4.303 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 18.4.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 18.4.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 19.0.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 19.0.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 19.1.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 19.1.01 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 19.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 19.2.097 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 19.2.098 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 19.2.099 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 19.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 19.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 19.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 19.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 20.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 20.1.11 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | 20.1.12 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱
کانال تلگرام کُلون @kolunsec_fa
تازههای KEV، خبرهای مهم و خلاصهی روزانه
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیبپذیریهای تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۳/۰۸/۲۸
- آخرین بهروزرسانی
- ۱۴۰۳/۰۸/۲۸
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- cisco
پیشبینی بهرهبرداری (EPSS)
۰٫۱۹٪
احتمال بهرهبرداری در ۳۰ روز
۸٫۹٪
صدک (نسبت به همهی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهرهبرداری
- ندارد
- اثر فنی
- جزئی
ضعفها (CWE)
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')