First published: Wed Sep 25 2024(Updated: )
A vulnerability in the UDP packet validation code of Cisco SD-WAN vEdge Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected system.This vulnerability is due to incorrect handling of a specific type of malformed UDP
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco SD-WAN vEdge, vBond, and vSmart Software Releases |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The cisco-sa-sdw-vedos-KqFfhps3 vulnerability is classified as a high severity denial of service (DoS) issue.
To mitigate the cisco-sa-sdw-vedos-KqFfhps3 vulnerability, users should upgrade to a fixed version of Cisco SD-WAN vEdge Software as recommended by Cisco.
The cisco-sa-sdw-vedos-KqFfhps3 vulnerability is caused by incorrect handling of malformed UDP packets in the UDP packet validation code.
No, the cisco-sa-sdw-vedos-KqFfhps3 vulnerability requires an unauthenticated, adjacent attacker to exploit it.
The vulnerable product is Cisco SD-WAN vEdge Software, along with its associated vBond and vSmart Software Releases.