Description
A vulnerability in the UDP packet validation code of Cisco SD-WAN vEdge Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to incorrect handling of a specific type of malformed UDP packet. An attacker in a machine-in-the-middle position could exploit this vulnerability by sending crafted UDP packets to an affected device. A successful exploit could allow the attacker to cause the device to reboot, resulting in a DoS condition on the affected system.
Metrics
CVSS 3.1 6.1/10
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco SD-WAN vEdge Cloud | 19.2.1; 20.1.12; 18.4.4; 19.3.0; 18.3.8; 19.2.2; 20.1.1; 18.3.6; 18.4.3; 18.4.302; 18.4.5; 18.4.303; 19.2.098; 19.1.0; 19.0.1a; 19.2.099; 18.3.7; 19.2.097; 18.3.1; 19.2.0 |
| Cisco | Cisco SD-WAN vEdge router | 18.4.303; 18.3.7; 19.3.0; 18.2.0; 20.1.12; 19.2.099; 18.3.3; 18.3.6; 19.0.0; 18.4.0; 19.1.01; 19.2.098; 18.3.1; 18.4.302; 19.2.2; 18.3.5; 19.1.0; 20.1.11; 19.2.097; 18.4.5 |
References
Timeline
- Published
- Sep 25, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Deferred