Vulnerability details
CVE-2020-26073
Cisco Catalyst SD-WAN ManagerCisco catalyst_sd-wan_manager
Cisco SD-WAN vManage Directory Traversal Vulnerability
CVSS 3.1
7.5High
Official description
A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within requests to application programmatic interfaces (APIs). An attacker could exploit this vulnerability by sending malicious requests to an API within the affected application. A successful exploit could allow the attacker to conduct directory traversal attacks and gain access to sensitive information including credentials or user tokens.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.5High | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/RL:X/RC:X/E:X |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.6.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.302 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.303 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.501_ES | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.0.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.0.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.1.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.097 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.098 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.099 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.31 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.929 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.1.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.1.12 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.1.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | catalyst_sd-wan_manager | 17.2.10 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 17.2.4 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 17.2.5 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 17.2.6 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 17.2.7 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 17.2.8 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 17.2.9 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.2.0 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.3.0 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.3.1 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.3.1.1 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.3.3 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.3.3.1 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.3.4 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.3.5 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.3.6 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.3.6.1 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.3.7 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.3.8 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.4.0 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.4.0.1 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.4.1 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.4.3 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.4.302 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.4.303 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.4.4 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.4.5 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 18.4.501_es | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 19.0.0 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 19.0.1a | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 19.1.0 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 19.2.0 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 19.2.097 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 19.2.098 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 19.2.099 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 19.2.1 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 19.2.2 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 19.2.3 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 19.2.31 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 19.2.929 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 19.3.0 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 20.1.1 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 20.1.1.1 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 20.1.12 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 20.1.2 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 20.3.1 | CISA ADP / Vulnrichment |
References and advisories
3- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-traversal-hQh24tmk
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssl-dos-7uZWwSEy
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-escalation-Jhqs5Skf
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2024-11-18
- Last updated
- 2024-11-18
- State
- Published
- Assigner (CNA)
- cisco
Exploit prediction (EPSS)
12.58%
Probability of exploitation in 30 days
96.2%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-35Path Traversal: '.../...//'