CVE-2020-3115

Cisco SD-WAN Solution Local Privilege Escalation Vulnerability

HIGH

8.8

CVSS Score

Published: January 26, 2020 at 04:31 AM UTC

Updated: June 17, 2026 at 03:17 AM UTC

9 products affected across 1 vendorSd WAN FirmwareVedge 5000Vedge 1000

Using Cisco SD-WAN Solution by Cisco?

Get instant alerts when new vulnerabilities affect Cisco SD-WAN Solution - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to elevate privileges to root-level privileges on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted file to the affected system. An exploit could allow the attacker to elevate privileges to root-level privileges.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Sd WAN Firmware · Cisco

95%

18.4.1 19.1.0

cisco-vedge-100 (environment) · cisco-vedge-1000 (environment) · cisco-vedge-100b (environment) · cisco-vedge-100m (environment) · cisco-vedge-100wm (environment) · cisco-vedge-2000 (environment) · cisco-vedge-5000 (environment)

Cisco SD-WAN Solution · Cisco

60%

All versions

Vedge 100 · Ciscodevice

80%

All versions

Vedge 1000 · Ciscodevice

80%

All versions

Vedge 100B · Ciscodevice

80%

All versions