← Back

CVE-2020-3369

nvd nist
Published: Jul 16, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper processing of FTP traffic. An attacker could exploit this vulnerability by sending crafted FTP packets through an affected device. A successful exploit could allow the attacker to make the device reboot continuously, causing a DoS condition.

Affected (5)

Cisco
2 products
Sd Wan Firmware
Vedge Cloud Router
Configuration A
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cisco
Sd Wan Firmware
Version 19.2.097
Sd Wan Firmware
Version 19.2.098
Sd Wan Firmware
Version 19.2.0
Sd Wan Firmware
Version 19.2.1
Running on/withPlatform Versions
Cisco
Vedge 5000
All versions
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Vedge Cloud Router
All versions

Related CWEs

CWE-118
Incorrect Access of Indexable Resource ('Range Error')
The product does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed using an index or pointer, such as memory or files.

References (2)

Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.