critical9.8
CVE-2020-4001
The SD-WAN Orchestrator 3.3.2, 3.4.x, and 4.0.x has default passwords allowing for a Pass-the-Hash Attack.
Impact
The SD-WAN Orchestrator 3.3.2, 3.4.x, and 4.0.x has default passwords allowing for a Pass-the-Hash Attack. SD-WAN Orchestrator ships with default passwords for predefined accounts which may lead to to a Pass-the-Hash attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Sd-Wan Orchestrator | from 3.4.0 through 3.4.4 from 4.0.0 through 4.0.1 Version 3.3.2 |