CVE-2020-3115

A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to elevate privileges to root-level privileges on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted file to the affected system. An exploit could allow the attacker to elevate privileges to root-level privileges.

• CWE-264
• CWE-269

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200122-sdwan-priv-escVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200122-sdwan-priv-escVendor Advisory

Published

Jan 26, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-2984Vulnerability in the Oracle Configuration Manager product of…7.1
• CVE-2020-3110A vulnerability in the Cisco Discovery Protocol implementati…8.8
• CVE-2020-3111A vulnerability in the Cisco Discovery Protocol implementati…8.8
• CVE-2020-3112A vulnerability in the REST API endpoint of Cisco Data Cente…8.8
• CVE-2020-3113A vulnerability in the web-based management interface of Cis…5.4
• CVE-2020-3114A vulnerability in the web-based management interface of Cis…8.8
• CVE-2020-3116A vulnerability in the way Cisco Webex applications process …5.5
• CVE-2020-3117A vulnerability in the API Framework of Cisco AsyncOS for Ci…4.7
• CVE-2020-3118A vulnerability in the Cisco Discovery Protocol implementati…8.8
• CVE-2020-3119A vulnerability in the Cisco Discovery Protocol implementati…8.8
• CVE-2020-3120A vulnerability in the Cisco Discovery Protocol implementati…6.5
• CVE-2020-3121A vulnerability in the web-based management interface of Cis…6.1