CVE-2020-4001

CVE-2020-4001: vulnerability in VMware SD-WAN Orchestrator

Published · Updated

Follow this CVE+ Monitor SD-WAN Orchestrator

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.9%
The SD-WAN Orchestrator 3.3.2, 3.4.x, and 4.0.x has default passwords allowing for a Pass-the-Hash Attack. SD-WAN Orchestrator ships with default passwords for predefined accounts which may lead to to a Pass-the-Hash attack.
Affected products
n/a · VMware SD-WAN Orchestrator