NetSight
high7.5

CVE-2020-3369

A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, remote attacker to cause a denial of s…

Impact

A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper processing of FTP traffic. An attacker could exploit this vulnerability by sending crafted FTP packets through an affected device. A successful exploit could allow the attacker to make the device reboot continuously, causing a DoS condition.

Affected products

VendorProductAffected versions
CiscoSd-Wan Firmware
Versions 19.2.0, 19.2.1, 19.2.097, 19.2.098
CiscoVedge Cloud Router
All versions

Weakness classification

References