PT-2020-3114 · Cisco · Cisco Sd-Wan Vedge Routers+2

Published 2020-07-15 · Updated 2020-07-23 · CVE-2020-3385

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN vEdge Routers (affected versions not specified) SD-WAN vEdge 5000 Series (affected versions not specified) SD-WAN vEdge Cloud (affected versions not specified)

Description A vulnerability in the deep packet inspection (DPI) engine could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected system. The issue is due to insufficient handling of malformed packets. An attacker could exploit this by sending crafted packets through an affected device, potentially causing the device to reboot and resulting in a DoS condition.

Recommendations For Cisco SD-WAN vEdge Routers, SD-WAN vEdge 5000 Series, and SD-WAN vEdge Cloud, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-371

Related Identifiers

BDU:2020-03406

CVE-2020-3385

Affected Products

Cisco Sd-Wan Vedge Routers

Sd-Wan Vedge 5000 Series

Sd-Wan Vedge Cloud

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-3385 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vedgfpdos-PkqQrnwV · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-03406 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3385 · Vendor Advisory