High severity8.8NVD Advisory· Published Jul 16, 2020· Updated Jun 17, 2026

CVE-2020-3387

Description

A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to execute code with root privileges on an affected system. The vulnerability is due to insufficient input sanitization during user authentication processing. An attacker could exploit this vulnerability by sending a crafted response to the Cisco SD-WAN vManage Software. A successful exploit could allow the attacker to access the software and execute commands they should not be authorized to execute.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Sd Wan Firmware
cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:*
Range: <=18.3.0
Cisco Systems, Inc./SD-WAN vManage Softwarellm-fuzzy
Range: 19.2.2
Cisco Systems, Inc./Sd Wan Vmanagecpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/162958/Cisco-SD-WAN-vManage-19.2.2-Remote-Root.htmlnvdExploitThird Party AdvisoryVDB Entry
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanrce-4jtWT28PnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.010
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000