A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected device by using an account that has a default, static password. This account has root privileges. The vulnerability exists because the affected software has a user account with a default, static password. An attacker could exploit this vulnerability by remotely connecting to an affected system by using this account. A successful exploit could allow the attacker to log in by using this account with root privileges.
References
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
|
History
21 Nov 2024, 05:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdscred-HfWWfqBj - Vendor Advisory |
23 May 2023, 13:55
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:cisco:isr1100:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr1100-6g:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr1100-4g:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr1100-4gltegb:-:*:*:*:*:*:*:* |
cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:1100-4gltegb_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:1100-4gltena_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:* |
Information
Published : 2020-07-16 18:15
Updated : 2024-11-21 05:30
NVD link : CVE-2020-3180
Mitre link : CVE-2020-3180
CVE.ORG link : CVE-2020-3180
JSON object : View
Products Affected
cisco
- sd-wan
- vedge_1000
- vedge_100
- vedge_100b
- 1100-4gltegb_integrated_services_router
- vedge_100wm
- vedge_2000
- 1100-6g_integrated_services_router
- 1100_integrated_services_router
- 1100-4g_integrated_services_router
- vedge_100m
- 1100-4gltena_integrated_services_router
- vedge_5000