CVE-2024-20496
Cisco SD-WAN vEdge Routers Denial of Service Vulnerability
Severity
Medium 6.1
CVSS 3.1
Exploited
Not listed
EPSS
0.002
13.3th percentile
Discovered by
Third party
Published by the vendor
Published
Sep 25, 2024
Assigned by cisco
Description
A vulnerability in the UDP packet validation code of Cisco SD-WAN vEdge Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to incorrect handling of a specific type of malformed UDP packet. An attacker in a machine-in-the-middle position could exploit this vulnerability by sending crafted UDP packets to an affected device. A successful exploit could allow the attacker to cause the device to reboot, resulting in a DoS condition on the affected system.
Weakness: CWE-787
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco SD-WAN vEdge | Routing & Switching | cna-assigner |
Vendor-reported affected versions (2)
- Cisco · Cisco SD-WAN vEdge Cloud
- Cisco · Cisco SD-WAN vEdge router