PT-2020-4666 · Cisco · Cisco Ios Xe+1

Published 2020-11-04 · Updated 2021-08-06 · CVE-2020-3444

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Software (affected versions not specified) Cisco IOS XE (affected versions not specified)

Description A vulnerability exists in the packet filtering features of the software due to improper traffic filtering conditions on an affected device. This could allow an unauthenticated, remote attacker to bypass L2, L3, and L4 traffic filters by crafting a malicious TCP packet with specific characteristics and sending it to a targeted device. A successful exploit could allow the attacker to bypass the traffic filters and inject an arbitrary packet into the network.

Recommendations For Cisco SD-WAN Software, consider disabling the vulnerable packet filtering features until a patch is available. For Cisco IOS XE, restrict access to the vulnerable filtering module to minimize the risk of exploitation. As a temporary workaround, avoid using the vulnerable packet filtering features in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-05218

CVE-2020-3444

Affected Products

Cisco Ios Xe

Cisco Sd-Wan

References · 7

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cedge-filt-bypass-Y6wZMqm4 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-05218 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-3444 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3444 · Vendor Advisory
• https://t.me/cibsecurity/16007 · Telegram Post
• https://t.me/cvenotify/5900 · Telegram Post
• https://t.me/cvenotify/5276 · Telegram Post