Skip to main content

Sd Wan Firmware CVE-2020-3405

HIGH
Improper Restriction of XML External Entity Reference (CWE-611)
2020-07-16 psirt@cisco.com
7.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.3 HIGH
AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Jul 16, 2020 - 18:15 nvd
HIGH 7.3

DescriptionNVD

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by persuading a user to import a crafted XML file with malicious entries. A successful exploit could allow the attacker to read and write files within the affected application.

AnalysisAI

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as XML External Entity (XXE) (CWE-611), which allows attackers to read arbitrary files or perform SSRF through XML processing. A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by persuading a user to import a crafted XML file with malicious entries. A successful exploit could allow the attacker to read and write files within the affected application. Affected products include: Cisco Sd-Wan Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Disable external entity processing in XML parsers, use JSON instead of XML where possible.

CVE-2020-3387 HIGH POC
8.8 Jul 16

A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to execute code with root

CVE-2020-3264 HIGH POC
7.1 Mar 19

A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflo

CVE-2020-3437 MEDIUM POC
6.5 Jul 16

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem

CVE-2021-1301 CRITICAL
9.8 Jan 20

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks aga

CVE-2021-1300 CRITICAL
9.8 Jan 20

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks aga

CVE-2021-1299 HIGH
8.8 Jan 20

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection att

CVE-2021-1298 HIGH
8.8 Jan 20

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection att

CVE-2020-3381 HIGH
8.8 Jul 16

A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote at

CVE-2020-3115 HIGH
8.8 Jan 26

A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to

CVE-2019-1626 HIGH
8.8 Jun 20

A vulnerability in the vManage web-based UI (Web UI) of the Cisco SD-WAN Solution could allow an authenticated, remote a

CVE-2021-1279 HIGH
8.6 Jan 20

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of s

CVE-2021-1274 HIGH
8.6 Jan 20

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of s

Share

CVE-2020-3405 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy