CVE-2020-26071 - Vulnerability Details

- Cisco SD-WAN vEdge Arbitrary File Creation Vulnerability

Description

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overwrite arbitrary files on an affected device, which could result in a denial of service (DoS) condition.
The vulnerability is due to insufficient input validation for specific commands. An attacker could exploit this vulnerability by including crafted arguments to those specific commands. A successful exploit could allow the attacker to create or overwrite arbitrary files on the affected device, which could result in a DoS condition.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Published: 2024-11-18

Score: 8.4 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

No analysis available yet.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

Cisco Catalyst SD-WAN Manager

unknown

Version	Status	Constraints
`20.1.12`	affected	—
`19.2.1`	affected	—
`18.4.4`	affected	—
`18.4.5`	affected	—
`20.1.1.1`	affected	—
`20.1.1`	affected	—
`19.3.0`	affected	—
`19.2.2`	affected	—
`19.2.099`	affected	—
`18.3.6`	affected	—
`18.3.7`	affected	—
`19.2.0`	affected	—
`18.3.8`	affected	—
`19.0.0`	affected	—
`19.1.0`	affected	—
`18.4.302`	affected	—
`18.4.303`	affected	—
`19.2.097`	affected	—
`19.2.098`	affected	—
`17.2.10`	affected	—
`18.3.6.1`	affected	—
`19.0.1a`	affected	—
`18.2.0`	affected	—
`18.4.3`	affected	—
`18.4.1`	affected	—
`17.2.8`	affected	—
`18.3.3.1`	affected	—
`18.4.0`	affected	—
`18.3.1`	affected	—
`17.2.6`	affected	—
`17.2.9`	affected	—
`18.3.4`	affected	—
`17.2.5`	affected	—
`18.3.1.1`	affected	—
`18.3.5`	affected	—
`18.4.0.1`	affected	—
`18.3.3`	affected	—
`17.2.7`	affected	—
`17.2.4`	affected	—
`18.3.0`	affected	—
`19.2.3`	affected	—
`18.4.501_ES`	affected	—

Cisco

Cisco SD-WAN vContainer

unknown

Version	Status	Constraints
`18.4.5`	affected	—
`20.1.12`	affected	—
`18.3.6`	affected	—
`19.2.1`	affected	—
`19.3.0`	affected	—
`20.1.1`	affected	—
`19.2.2`	affected	—
`18.3.8`	affected	—
`18.4.3`	affected	—
`18.4.4`	affected	—
`18.4.302`	affected	—
`19.1.0`	affected	—
`18.4.303`	affected	—
`19.2.0`	affected	—
`19.2.098`	affected	—
`17.2.10`	affected	—
`18.3.7`	affected	—
`18.3.1`	affected	—
`19.2.099`	affected	—
`19.2.097`	affected	—
`18.3.4`	affected	—
`18.2.0`	affected	—
`18.3.5`	affected	—
`18.4.1`	affected	—
`17.2.5`	affected	—
`17.2.7`	affected	—
`17.2.8`	affected	—
`17.2.9`	affected	—
`18.4.0`	affected	—
`17.2.6`	affected	—
`18.3.0`	affected	—
`17.2.4`	affected	—
`18.3.3`	affected	—
`19.2.3`	affected	—

Cisco

Cisco SD-WAN vEdge Cloud

unknown

Version	Status	Constraints
`19.2.1`	affected	—
`20.1.12`	affected	—
`18.4.4`	affected	—
`19.3.0`	affected	—
`18.3.8`	affected	—
`19.2.2`	affected	—
`20.1.1`	affected	—
`18.3.6`	affected	—
`18.4.3`	affected	—
`18.4.302`	affected	—
`18.4.5`	affected	—
`18.4.303`	affected	—
`19.2.098`	affected	—
`19.1.0`	affected	—
`17.2.10`	affected	—
`19.0.1a`	affected	—
`19.2.099`	affected	—
`18.3.7`	affected	—
`19.2.097`	affected	—
`18.3.1`	affected	—
`19.2.0`	affected	—
`17.2.9`	affected	—
`18.3.4`	affected	—
`18.2.0`	affected	—
`18.4.1`	affected	—
`17.2.5`	affected	—
`18.4.0`	affected	—
`18.3.5`	affected	—
`18.3.3`	affected	—
`17.2.7`	affected	—
`17.2.6`	affected	—
`17.2.8`	affected	—
`18.3.0`	affected	—
`17.2.4`	affected	—
`19.2.3`	affected	—

Cisco

Cisco SD-WAN vEdge Router

unknown

Version	Status	Constraints
`18.4.303`	affected	—
`18.3.7`	affected	—
`19.3.0`	affected	—
`18.2.0`	affected	—
`20.1.12`	affected	—
`19.2.099`	affected	—
`17.2.10`	affected	—
`18.3.3`	affected	—
`18.3.6`	affected	—
`19.0.0`	affected	—
`17.2.6`	affected	—
`18.4.0`	affected	—
`19.1.01`	affected	—
`19.2.098`	affected	—
`18.3.1`	affected	—
`18.4.302`	affected	—
`19.2.2`	affected	—
`18.3.5`	affected	—
`17.2.9`	affected	—
`19.1.0`	affected	—
`20.1.11`	affected	—
`19.2.097`	affected	—
`18.4.5`	affected	—
`17.2.5`	affected	—
`17.2.8`	affected	—
`18.3.8`	affected	—
`18.3.0`	affected	—
`18.4.3`	affected	—
`18.4.4`	affected	—
`19.2.1`	affected	—
`17.2.4`	affected	—
`18.3.4`	affected	—
`19.0.1a`	affected	—
`20.1.1`	affected	—
`17.2.7`	affected	—
`18.4.1`	affected	—
`19.2.0`	affected	—
`19.2.3`	affected	—

Configuration 1 [-]

OR	cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.4:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.5:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.6:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.7:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.8:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.9:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.10:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.2.0:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.0:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.1:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.1.1:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.3:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.3.1:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.4:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.5:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.6:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.6.1:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.7:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.8:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.0:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.0.1:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.1:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.3:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.4:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.5:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.302:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.303:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.501_es:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.0.0:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.0.1a:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.1.0:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.0:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.1:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.2:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.3:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.097:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.098:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.099:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.3.0:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.1.1:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.1.1.1:::::::*
	cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.1.12:::::::*

No data.

Vendor	Product	Confidence	Versions
Cisco	Sd-wan	—	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
EUVD	EUVD-2020-18701	A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overwrite arbitrary files on an affected device, which could result in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation for specific commands. An attacker could exploit this vulnerability by including crafted arguments to those specific commands. A successful exploit could allow the attacker to create or overwrite arbitrary files on the affected device, which could result in a DoS condition.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00136.

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vsoln-arbfile-gtsEYxns

History

Mon, 04 Aug 2025 14:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Cisco catalyst Sd-wan Manager
CPEs		cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.10:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.4:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.5:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.6:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.7:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.8:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.9:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.2.0:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.0:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.1.1:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.1:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.3.1:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.3:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.4:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.5:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.6.1:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.6:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.7:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.8:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.0.1:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.0:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.1:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.302:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.303:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.3:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.4:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.501_es:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.5:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.0.0:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.0.1a:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.1.0:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.097:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.098:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.099:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.0:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.1:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.2:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.3:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.3.0:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.1.1.1:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.1.12:::::::* cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.1.1:::::::*
Vendors & Products		Cisco catalyst Sd-wan Manager

Mon, 18 Nov 2024 17:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 18 Nov 2024 16:15:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overwrite arbitrary files on an affected device, which could result in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation for specific commands. An attacker could exploit this vulnerability by including crafted arguments to those specific commands. A successful exploit could allow the attacker to create or overwrite arbitrary files on the affected device, which could result in a DoS condition.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Title		Cisco SD-WAN vEdge Arbitrary File Creation Vulnerability
Weaknesses		CWE-22
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vsoln-arbfile-gtsEYxns
Metrics		cvssV3_1 `{'score': 8.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H/RL:X/RC:X/E:X'}`

Subscriptions

Cisco Catalyst Sd-wan Manager Sd-wan

MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2024-11-18T16:05:35.221Z

Updated: 2024-11-18T16:23:51.429Z

Reserved: 2020-09-24T00:00:00.000Z

Link: CVE-2020-26071

Vulnrichment

Updated: 2024-11-18T16:23:37.770Z

NVD

Status : Analyzed

Published: 2024-11-18T16:15:05.710

Modified: 2025-08-04T14:42:24.743

Link: CVE-2020-26071

Redhat

No data.

OpenCVE Enrichment

Updated: 2025-07-13T11:06:24Z

Weaknesses

CWE-22

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object