Cisco SD-WAN vManage 19.2.2 Remote Root Exploit

Cisco SD-WAN vManage 19.2.2 Remote Root Shell PoC / This PoC exploits CVE-2020–3387 through CVE-2020–3437 / function exploit var payload = new Image1,1; payload.src =...

Cisco SD-WAN vManage 19.2.2 Remote Root

Cisco SD-WAN vManage 19.2.2 Remote Root Shell PoC / This PoC exploits CVE-2020–3387 through CVE-2020–3437 / function exploit var payload = new Image1,1; payload.src =...

CVE-2020-3437

Cisco SD-WAN vManage Software information-disclosure vulnerability (CVE-2020-3437) enables an authenticated, remote attacker to read arbitrary files on the device filesystem via the web management interface due to insufficient file scope. Impact: partial confidentiality loss; CVSS vectors in publ...

CVE-2020-3437 Cisco SD-WAN vManage Software Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of the device. The vulnerability is due to insufficient file scope limiting. An attacker could exploit this...