Lucene search

[email protected]CVE-2020-26064

HistoryAug 04, 2023 - 9:15 p.m.

CVE-2020-26064

2023-08-0421:15:09

CWE-611

[email protected]

web.nvd.nist.gov

cve-2020-26064

cisco

sd-wan

vmanage

software

vulnerability

remote attacker

access

information security

xxe

xml

nvd

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

JSON

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system.
The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by persuading a user to import a crafted XML file with malicious entries. A successful exploit could allow the attacker to read and write files within the affected application.

Affected configurations

NVD

Node

ciscocatalyst_sd-wan_managerMatch17.2.4

ciscocatalyst_sd-wan_managerMatch17.2.5

ciscocatalyst_sd-wan_managerMatch17.2.6

ciscocatalyst_sd-wan_managerMatch17.2.7

ciscocatalyst_sd-wan_managerMatch17.2.8

ciscocatalyst_sd-wan_managerMatch17.2.9

ciscocatalyst_sd-wan_managerMatch17.2.10

ciscocatalyst_sd-wan_managerMatch18.2.0

ciscocatalyst_sd-wan_managerMatch18.3.0

ciscocatalyst_sd-wan_managerMatch18.3.1

ciscocatalyst_sd-wan_managerMatch18.3.1.1

ciscocatalyst_sd-wan_managerMatch18.3.3

ciscocatalyst_sd-wan_managerMatch18.3.3.1

ciscocatalyst_sd-wan_managerMatch18.3.4

ciscocatalyst_sd-wan_managerMatch18.3.5

ciscocatalyst_sd-wan_managerMatch18.3.6.1

ciscocatalyst_sd-wan_managerMatch18.3.7

ciscocatalyst_sd-wan_managerMatch18.3.8

ciscocatalyst_sd-wan_managerMatch18.4.0

ciscocatalyst_sd-wan_managerMatch18.4.0.1

ciscocatalyst_sd-wan_managerMatch18.4.1

ciscocatalyst_sd-wan_managerMatch18.4.3

ciscocatalyst_sd-wan_managerMatch18.4.4

ciscocatalyst_sd-wan_managerMatch18.4.5

ciscocatalyst_sd-wan_managerMatch18.4.302

ciscocatalyst_sd-wan_managerMatch18.4.303

ciscocatalyst_sd-wan_managerMatch19.1.0

ciscocatalyst_sd-wan_managerMatch19.2.0

ciscocatalyst_sd-wan_managerMatch19.2.1

ciscocatalyst_sd-wan_managerMatch19.2.2

ciscocatalyst_sd-wan_managerMatch19.2.3

ciscocatalyst_sd-wan_managerMatch19.2.31

ciscocatalyst_sd-wan_managerMatch19.2.097

ciscocatalyst_sd-wan_managerMatch19.2.099

ciscocatalyst_sd-wan_managerMatch19.2.929

ciscocatalyst_sd-wan_managerMatch19.3.0

ciscocatalyst_sd-wan_managerMatch20.1.1

ciscocatalyst_sd-wan_managerMatch20.1.1.1

ciscocatalyst_sd-wan_managerMatch20.1.12

ciscocatalyst_sd-wan_managerMatch20.3.1

CPENameOperatorVersion
cisco:catalyst_sd-wan_managercisco catalyst sd-wan managereq17.2.4
cisco:catalyst_sd-wan_managercisco catalyst sd-wan managereq17.2.5
cisco:catalyst_sd-wan_managercisco catalyst sd-wan managereq17.2.6
cisco:catalyst_sd-wan_managercisco catalyst sd-wan managereq17.2.7
cisco:catalyst_sd-wan_managercisco catalyst sd-wan managereq17.2.8
cisco:catalyst_sd-wan_managercisco catalyst sd-wan managereq17.2.9
cisco:catalyst_sd-wan_managercisco catalyst sd-wan managereq17.2.10
cisco:catalyst_sd-wan_managercisco catalyst sd-wan managereq18.2.0
cisco:catalyst_sd-wan_managercisco catalyst sd-wan managereq18.3.0
cisco:catalyst_sd-wan_managercisco catalyst sd-wan managereq18.3.1

CPE	Name	Operator	Version
cisco:catalyst_sd-wan_manager	cisco catalyst sd-wan manager	eq	17.2.4
cisco:catalyst_sd-wan_manager	cisco catalyst sd-wan manager	eq	17.2.5
cisco:catalyst_sd-wan_manager	cisco catalyst sd-wan manager	eq	17.2.6
cisco:catalyst_sd-wan_manager	cisco catalyst sd-wan manager	eq	17.2.7
cisco:catalyst_sd-wan_manager	cisco catalyst sd-wan manager	eq	17.2.8
cisco:catalyst_sd-wan_manager	cisco catalyst sd-wan manager	eq	17.2.9
cisco:catalyst_sd-wan_manager	cisco catalyst sd-wan manager	eq	17.2.10
cisco:catalyst_sd-wan_manager	cisco catalyst sd-wan manager	eq	18.2.0
cisco:catalyst_sd-wan_manager	cisco catalyst sd-wan manager	eq	18.3.0
cisco:catalyst_sd-wan_manager	cisco catalyst sd-wan manager	eq	18.3.1

Rows per page:

1-10 of 401

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco SD-WAN vManage",
    "versions": [
      {
        "version": "17.2.6",
        "status": "affected"
      },
      {
        "version": "17.2.7",
        "status": "affected"
      },
      {
        "version": "17.2.8",
        "status": "affected"
      },
      {
        "version": "17.2.9",
        "status": "affected"
      },
      {
        "version": "17.2.10",
        "status": "affected"
      },
      {
        "version": "17.2.4",
        "status": "affected"
      },
      {
        "version": "17.2.5",
        "status": "affected"
      },
      {
        "version": "18.3.1.1",
        "status": "affected"
      },
      {
        "version": "18.3.3.1",
        "status": "affected"
      },
      {
        "version": "18.3.3",
        "status": "affected"
      },
      {
        "version": "18.3.4",
        "status": "affected"
      },
      {
        "version": "18.3.5",
        "status": "affected"
      },
      {
        "version": "18.3.7",
        "status": "affected"
      },
      {
        "version": "18.3.8",
        "status": "affected"
      },
      {
        "version": "18.3.6.1",
        "status": "affected"
      },
      {
        "version": "18.3.1",
        "status": "affected"
      },
      {
        "version": "18.3.0",
        "status": "affected"
      },
      {
        "version": "18.4.0.1",
        "status": "affected"
      },
      {
        "version": "18.4.3",
        "status": "affected"
      },
      {
        "version": "18.4.302",
        "status": "affected"
      },
      {
        "version": "18.4.303",
        "status": "affected"
      },
      {
        "version": "18.4.4",
        "status": "affected"
      },
      {
        "version": "18.4.5",
        "status": "affected"
      },
      {
        "version": "18.4.0",
        "status": "affected"
      },
      {
        "version": "18.4.1",
        "status": "affected"
      },
      {
        "version": "19.2.0",
        "status": "affected"
      },
      {
        "version": "19.2.097",
        "status": "affected"
      },
      {
        "version": "19.2.099",
        "status": "affected"
      },
      {
        "version": "19.2.1",
        "status": "affected"
      },
      {
        "version": "19.2.2",
        "status": "affected"
      },
      {
        "version": "19.2.3",
        "status": "affected"
      },
      {
        "version": "19.2.31",
        "status": "affected"
      },
      {
        "version": "19.2.929",
        "status": "affected"
      },
      {
        "version": "20.1.1.1",
        "status": "affected"
      },
      {
        "version": "20.1.12",
        "status": "affected"
      },
      {
        "version": "20.1.1",
        "status": "affected"
      },
      {
        "version": "19.3.0",
        "status": "affected"
      },
      {
        "version": "19.1.0",
        "status": "affected"
      },
      {
        "version": "18.2.0",
        "status": "affected"
      },
      {
        "version": "20.3.1",
        "status": "affected"
      }
    ]
  }
]