CVE-2020-3375— Cisco SD-WAN Solution Software Buffer Overflow Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-3375
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco SD-WAN Solution Software Buffer Overflow Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to information that they are not authorized to access, make changes to the system that they are not authorized to make, and execute commands on an affected system with privileges of the root user.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
内存缓冲区边界内操作的限制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco SD-WAN Solution 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco SD-WAN Solution是美国思科（Cisco）公司的一套网络扩展解决方案。 Cisco SD-WAN Solution中存在输入验证错误漏洞，该漏洞源于输入验证不足。攻击者可通过将特制流量发送到受影响的设备利用该漏洞提升权限，并以root用户的权限在受影响的系统上执行命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco SD-WAN vManage | n/a | - |
II. Public POCs for CVE-2020-3375
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-3375
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdbufof-h5f5VSeLvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2020-3375
Same Patch Batch · Cisco · 2020-07-31 · 11 CVEs total
| CVE-2020-3383 | 8.8 HIGH | Cisco Data Center Network Manager Path Traversal Vulnerability |
| CVE-2020-3384 | 8.2 HIGH | Cisco Data Center Network Manager Command Injection Vulnerability |
| CVE-2020-3376 | 7.3 HIGH | Cisco Data Center Network Manager Authentication Bypass Vulnerability |
| CVE-2020-3462 | 6.3 MEDIUM | Cisco Data Center Network Manager SQL Injection Vulnerability |
| CVE-2020-3377 | 6.3 MEDIUM | Cisco Data Center Network Manager Command Injection Vulnerability |
| CVE-2020-3461 | Cisco Data Center Network Manager Information Disclosure Vulnerability | |
| CVE-2020-3374 | Cisco SD-WAN vManage Software Authorization Bypass Vulnerability | |
| CVE-2020-3382 | Cisco Data Center Network Manager Authentication Bypass Vulnerability | |
| CVE-2020-3386 | Cisco Data Center Network Manager Improper Authorization Vulnerability | |
| CVE-2020-3460 | Cisco Data Center Network Manager Cross-Site Scripting Vulnerability |
IV. Related Vulnerabilities
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-119
- CVE-2026-22167
GPU DDK - Cache resident PM buffers writable by other GPU re - CVE-2026-27890
Firebird has Pre-Auth DOS when Processing Out of Order CNCT_ - CVE-2026-34864
Huawei HarmonyOS 安全漏洞 - CVE-2026-4149
Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code - CVE-2026-34988
Wasmtime leaks data between pooling allocator instances
V. Comments for CVE-2020-3375
No comments yet