VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Nov 24, 2020· Updated Jun 17, 2026

CVE-2020-4001

CVE-2020-4001

Description

The SD-WAN Orchestrator 3.3.2, 3.4.x, and 4.0.x has default passwords allowing for a Pass-the-Hash Attack. SD-WAN Orchestrator ships with default passwords for predefined accounts which may lead to to a Pass-the-Hash attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • VMware/Sd Wan Orchestrator5 versions
    cpe:2.3:a:vmware:sd-wan_orchestrator:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:vmware:sd-wan_orchestrator:*:*:*:*:*:*:*:*range: >=3.4.0,<=3.4.4
    • cpe:2.3:a:vmware:sd-wan_orchestrator:3.3.2:-:*:*:*:*:*:*
    • cpe:2.3:a:vmware:sd-wan_orchestrator:3.3.2:p1:*:*:*:*:*:*
    • cpe:2.3:a:vmware:sd-wan_orchestrator:3.3.2:p2:*:*:*:*:*:*
    • (no CPE)range: 3.3.2, 3.4.x, 4.0.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.