CVE-2020-4000: Path Traversal
The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 allows for executing files through directory traversal. An authenticated SD-WAN Orchestrator user is able to traversal directories which may lead to code execution of files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4000?
CVE-2020-4000 is classified as a critical vulnerability due to the potential for code execution via directory traversal.
How do I fix CVE-2020-4000?
To mitigate CVE-2020-4000, upgrade the SD-WAN Orchestrator to versions 3.3.2 P3, 3.4.4, or 4.0.1 or later.
What versions are affected by CVE-2020-4000?
CVE-2020-4000 affects SD-WAN Orchestrator versions prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1.
What types of attacks does CVE-2020-4000 enable?
CVE-2020-4000 enables authenticated users to execute arbitrary files and potentially harmful code on the server.
Is authentication required to exploit CVE-2020-4000?
Yes, an attacker must have authenticated access to exploit CVE-2020-4000 through directory traversal.