CVE-2020-3351: Cisco SD-WAN Solution Software Denial of Service Vulnerability
A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper validation of fields in Cisco SD-WAN peering messages that are encapsulated in UDP packets. An attacker could exploit this vulnerability by sending crafted UDP messages to the targeted system. A successful exploit could allow the attacker to cause services on the device to fail, resulting in a DoS condition that could impact the targeted device and other devices that depend on it.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Cisco SD-WAN Solution Software vulnerability?
The vulnerability ID for this Cisco SD-WAN Solution Software vulnerability is CVE-2020-3351.
What is the severity of CVE-2020-3351?
CVE-2020-3351 has a severity rating of 8.6 (high).
How does CVE-2020-3351 allow an attacker to cause a denial of service (DoS) condition?
CVE-2020-3351 allows an unauthenticated remote attacker to cause a DoS condition by exploiting improper validation of fields in Cisco SD-WAN peering messages encapsulated in UDP packets.
What software versions are affected by CVE-2020-3351?
Cisco SD-WAN Solution Software with versions up to 17.2.7 and between 17.2.8 to 18.3.0 are affected by CVE-2020-3351.
How can I fix CVE-2020-3351?
To fix CVE-2020-3351, it is recommended to upgrade to a version of Cisco SD-WAN Solution Software that is not vulnerable.