CVE-2020-3264: Cisco SD-WAN Solution Buffer Overflow Vulnerability
First published: Thu Mar 19 2020(Updated: )
A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to information that they are not authorized to access and make changes to the system that they are not authorized to make.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco SD-WAN | <18.4.5 | |
| Cisco SD-WAN | >=19.2.0<19.2.2 | |
| Cisco SD-WAN | =20.1.0 | |
| Cisco SD-WAN | =20.3.0 | |
| Cisco vEdge Cloud | ||
| Cisco vManage Network Management | ||
| Cisco SD-WAN vSmart Controller | ||
| Cisco 1100-4g/6g Integrated Services Router | ||
| Cisco 1100 Integrated Services Router | ||
| Cisco 1100 Integrated Services Router | ||
| Cisco 1100 Integrated Services Router | ||
| Cisco vEdge 100 Router | ||
| Cisco vEdge 1000 Router | ||
| Cisco vEdge 100b Router | ||
| Cisco vEdge 100m router | ||
| Cisco vEdge 100wm router | ||
| Cisco vEdge 2000 router | ||
| Cisco vEdge-5000 firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Cisco SD-WAN Solution software vulnerability?
The vulnerability ID for this Cisco SD-WAN Solution software vulnerability is CVE-2020-3264.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by sending crafted traffic to an affected device.
What is the severity rating of CVE-2020-3264?
The severity rating of CVE-2020-3264 is 7.1, which is considered high.
Which versions of Cisco SD-WAN Solution software are affected by this vulnerability?
The versions affected by this vulnerability are 18.4.5, 19.2.0 to 19.2.2, 20.1.0, and 20.3.0.
Are the Cisco Vedge Cloud Router, Cisco Vmanage Network Management System, and Cisco Vsmart Controller vulnerable to this vulnerability?
No, the Cisco Vedge Cloud Router, Cisco Vmanage Network Management System, and Cisco Vsmart Controller are not vulnerable to this vulnerability.
- agent/references
- agent/type
- agent/title
- agent/weakness
- agent/author
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco sd-wan
- version/cisco sd-wan/19.2.0
- version/cisco sd-wan/20.1.0
- version/cisco sd-wan/20.3.0
- canonical/cisco vedge cloud
- canonical/cisco vmanage network management
- canonical/cisco sd-wan vsmart controller
- canonical/cisco 1100-4g/6g integrated services router
- canonical/cisco 1100 integrated services router
- canonical/cisco vedge 100 router
- canonical/cisco vedge 1000 router
- canonical/cisco vedge 100b router
- canonical/cisco vedge 100m router
- canonical/cisco vedge 100wm router
- canonical/cisco vedge 2000 router
- canonical/cisco vedge-5000 firmware