CVE-2020-3381: Cisco SD-WAN vManage Software Directory Traversal Vulnerability

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-07-16 · updated 2026-06-17
Weakness: CWE-22

Description

A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct directory traversal attacks and obtain read and write access to sensitive files on a targeted system. The vulnerability is due to a lack of proper validation of files that are uploaded to an affected device. An attacker could exploit this vulnerability by uploading a crafted file to an affected system. An exploit could allow the attacker to view or modify arbitrary files on the targeted system.

Affected products

Cisco SD-WAN vManage: through 18.3.0; from 18.4.0 before 19.2.3; from 19.3.0 through 20.1 — fixed in 19.2.3

How to fix

Upgrade to a fixed version: Cisco SD-WAN vManage 19.2.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-3381 or the next vulnerability affects your stack