CVE-2020-3444: Cisco SD-WAN Software Packet Filtering Bypass Vulnerability
A vulnerability in the packet filtering features of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by crafting a malicious TCP packet with specific characteristics and sending it to a targeted device. A successful exploit could allow the attacker to bypass the L3 and L4 traffic filters and inject an arbitrary packet into the network.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-3444?
CVE-2020-3444 has been assigned a medium severity rating due to its potential impact on security.
How do I fix CVE-2020-3444?
To remediate CVE-2020-3444, update your Cisco SD-WAN software to versions later than 16.12.2r and 17.2 as per the vendor's guidelines.
Which Cisco products are affected by CVE-2020-3444?
CVE-2020-3444 affects Cisco IOS XE versions up to 16.12.2r and between versions 17.2 and 17.2.1.
Can CVE-2020-3444 be exploited remotely?
Yes, CVE-2020-3444 can be exploited by an unauthenticated remote attacker.
What does CVE-2020-3444 allow attackers to do?
CVE-2020-3444 allows attackers to bypass L3 and L4 traffic filtering on affected devices.