8.4
High
CVE-2020-26071 A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or…
Description
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overwrite arbitrary files on an affected device, which could result in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation for specific commands. An attacker could exploit this vulnerability by including crafted arguments to those specific commands. A successful exploit could allow the attacker to create or overwrite arbitrary files on the affected device, which could result in a DoS condition.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Catalyst SD-WAN Manager 20.1 | 20.1.1 → 20.1.12 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 19.3.0 | No fix stated |
| Cisco Catalyst SD-WAN Manager 19.2 | 19.2.0 → 19.2.099 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 19.1.0 | No fix stated |
| Cisco Catalyst SD-WAN Manager 19.0 | 19.0.0 → 19.0.1a | No fix stated |
| Cisco Catalyst SD-WAN Manager 18.4 | 18.4.0 → 18.4.303 | No fix stated |
| Cisco Catalyst SD-WAN Manager 18.3 | 18.3.0 → 18.3.8 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 18.2.0 | No fix stated |
| Cisco Catalyst SD-WAN Manager 17.2 | 17.2.4 → 17.2.10 | No fix stated |
Show the 26 other branches Hide the 26 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco SD-WAN vContainer 20.1 | 20.1.1 → 20.1.12 | No fix stated |
| Cisco SD-WAN vContainer | 19.3.0 | No fix stated |
| Cisco SD-WAN vContainer 19.2 | 19.2.0 → 19.2.099 | No fix stated |
| Cisco SD-WAN vContainer | 19.1.0 | No fix stated |
| Cisco SD-WAN vContainer 18.4 | 18.4.0 → 18.4.303 | No fix stated |
| Cisco SD-WAN vContainer 18.3 | 18.3.0 → 18.3.8 | No fix stated |
| Cisco SD-WAN vContainer | 18.2.0 | No fix stated |
| Cisco SD-WAN vContainer 17.2 | 17.2.4 → 17.2.10 | No fix stated |
| Cisco SD-WAN vEdge Cloud 20.1 | 20.1.1 → 20.1.12 | No fix stated |
| Cisco SD-WAN vEdge Cloud | 19.3.0 | No fix stated |
| Cisco SD-WAN vEdge Cloud 19.2 | 19.2.0 → 19.2.099 | No fix stated |
| Cisco SD-WAN vEdge Cloud | 19.1.0 | No fix stated |
| Cisco SD-WAN vEdge Cloud | 19.0.1a | No fix stated |
| Cisco SD-WAN vEdge Cloud 18.4 | 18.4.0 → 18.4.303 | No fix stated |
| Cisco SD-WAN vEdge Cloud 18.3 | 18.3.0 → 18.3.8 | No fix stated |
| Cisco SD-WAN vEdge Cloud | 18.2.0 | No fix stated |
| Cisco SD-WAN vEdge Cloud 17.2 | 17.2.4 → 17.2.10 | No fix stated |
| Cisco SD-WAN vEdge Router 20.1 | 20.1.1 → 20.1.12 | No fix stated |
| Cisco SD-WAN vEdge Router | 19.3.0 | No fix stated |
| Cisco SD-WAN vEdge Router 19.2 | 19.2.0 → 19.2.099 | No fix stated |
| Cisco SD-WAN vEdge Router 19.1 | 19.1.0 → 19.1.01 | No fix stated |
| Cisco SD-WAN vEdge Router 19.0 | 19.0.0 → 19.0.1a | No fix stated |
| Cisco SD-WAN vEdge Router 18.4 | 18.4.0 → 18.4.303 | No fix stated |
| Cisco SD-WAN vEdge Router 18.3 | 18.3.0 → 18.3.8 | No fix stated |
| Cisco SD-WAN vEdge Router | 18.2.0 | No fix stated |
| Cisco SD-WAN vEdge Router 17.2 | 17.2.4 → 17.2.10 | No fix stated |
References
- cisco-sa-vsoln-arbfile-gtsEYxns sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Catalyst SD-WAN Manager
The 46 CVEs of Cisco Catalyst SD-WAN Manager →
CVE-2026-76504
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
9.8
Critical
CVE-2026-20313
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering…
7.7
High
CVE-2026-20312
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering…
8.8
High
CVE-2026-20310
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering…
9.1
Critical