CVE-2020-3444: medium-severity vulnerability in Cisco SD-WAN Solution
Cisco SD-WAN Software Packet Filtering Bypass Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.8epss 1.5%
A vulnerability in the packet filtering features of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by crafting a malicious TCP packet with specific characteristics and sending it to a targeted device. A successful exploit could allow the attacker to bypass the L3 and L4 traffic filters and inject an arbitrary packet into the network.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Affected products
Cisco · Cisco SD-WAN SolutionRelated CVEs — Cisco SD-WAN Solution
In the same product, most dangerous first.
CVE-2019-1651CRITICALCisco SD-WAN Solution Buffer Overflow VulnerabilityEPSS 4.9%CVE-2019-1624HIGHCisco SD-WAN Solution Command Injection VulnerabilityEPSS 4.3%CVE-2019-1650HIGHCisco SD-WAN Solution Arbitrary File Overwrite VulnerabilityEPSS 3.5%CVE-2018-0432—Cisco SD-WAN Solution Privilege Escalation VulnerabilityEPSS 2.6%CVE-2019-12629MEDIUMCisco SD-WAN vManage Command Injection VulnerabilityEPSS 2.5%CVE-2021-1298HIGHCisco SD-WAN Command Injection VulnerabilitiesEPSS 2.2%