CVE-2020-3374: Cisco SD-WAN vManage Software Authorization Bypass Vulnerability

Severity: critical (CVSS 9.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-07-31 · updated 2026-06-17
Weakness: CWE-285

Description

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization, enabling them to access sensitive information, modify the system configuration, or impact the availability of the affected system. The vulnerability is due to insufficient authorization checking on the affected system. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected system. A successful exploit could allow the attacker to gain privileges beyond what would normally be authorized for their configured user authorization level. The attacker may be able to access sensitive information, modify the system configuration, or impact the availability of the affected system.

Affected products

Cisco Sd-Wan: through 18.3.0; from 18.4.0 before 18.4.5; from 19.2.0 before 19.2.2; from 19.3.0 before 20.1.1 — fixed in 18.4.5, 19.2.2, 20.1.1

How to fix

Upgrade to a fixed version: Cisco Sd-Wan 18.4.5, 19.2.2, 20.1.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-3374 or the next vulnerability affects your stack