CVE-2020-4002: Input Validation
The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 handles system parameters in an insecure way. An authenticated SD-WAN Orchestrator user with high privileges may be able to execute arbitrary code on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4002?
CVE-2020-4002 is considered critical due to the potential for arbitrary code execution by authenticated users with high privileges.
How do I fix CVE-2020-4002?
To fix CVE-2020-4002, you should upgrade your VMware SD-WAN Orchestrator to version 3.3.2 P3, 3.4.4, or 4.0.1 or later.
Which versions of VMware SD-WAN Orchestrator are affected by CVE-2020-4002?
Versions prior to 3.3.2 P3, 3.4.4, and 4.0.1 of VMware SD-WAN Orchestrator are affected by CVE-2020-4002.
What type of vulnerability is CVE-2020-4002?
CVE-2020-4002 is a vulnerability that allows an attacker to execute arbitrary code on the underlying operating system due to insecure handling of system parameters.
Who is at risk from CVE-2020-4002?
Authenticated users with high privileges on the affected versions of VMware SD-WAN Orchestrator are at risk from CVE-2020-4002.