← Vulnerability feed

Vulnerability record · CVE-2020-3375 · published 31 July 2020

CVE-2020-3375: Cisco sd-wan memory buffer overflow vulnerability

Cisco · Sd Wan

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to information that they are not authorized to access, make changes to the system that they are not authorized to make, and execute commands on an affected system with privileges of the root user.

9.8 CVSS 3.1 Critical EPSS 3.9% · top 10.1% CWE-119 · Memory buffer overflowCWE-20 · Improper input validation
9.8CVSS 3.1 base score, v2 10.0
3.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to information that they are not authorized to access, make changes to the system that they are not authorized to make, and execute commands on an affected system with privileges of the root user.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdbufof-h5f5VSeL Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdbufof-h5f5VSeL Vendor Advisory

Track CVE-2020-3375 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2022-20775Cisco SD-WAN CLI access control flaw allows root privilege escalationCisco SD-WAN Software has improper access controls on commands within the application CLI, letting an authenticated local attacker run a crafted comm…KEVEPSS 12%analysed7.7CVE-2025-20352Cisco IOS and IOS XE SNMP stack overflow allows DoS and root code executionA stack-based buffer overflow in the SNMP subsystem of Cisco IOS and IOS XE Software can be triggered by a crafted SNMP packet sent over IPv4 or IPv6…KEVEPSS 39%analysed9.9CVE-2020-3374Cisco sd-wan improper authorization vulnerabilityA vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass author…EPSS 1.9%9.8CVE-2021-34727Cisco ios xe sd-wan classic buffer overflow vulnerabilityA vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on …EPSS 2.6%9.8CVE-2021-1300Cisco ios xe sd-wan memory buffer overflow vulnerabilityMultiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For …EPSS 2.1%9.8CVE-2021-1301Cisco ios xe sd-wan memory buffer overflow vulnerabilityMultiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For …EPSS 2.1%9.8CVE-2018-15387Cisco sd-wan improper input validation vulnerabilityA vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. …EPSS 1.1%9.1CVE-2021-1619Cisco ios xe use of uninitialized resource vulnerabilityA vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS XE Software could allow an unauthenticated, remote a…EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2020-3375), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.