CVE-2023-20262: fallo de gravedad media en Cisco SD-WAN Solution
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.3epss 1.0%
A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only. This vulnerability does not prevent the system from continuing to function, and web UI access is not affected.
This vulnerability is due to insufficient resource management when an affected system is in an error condition. An attacker could exploit this vulnerability by sending malicious traffic to the affected system. A successful exploit could allow the attacker to cause the SSH process to crash and restart, resulting in a DoS condition for the SSH service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Productos afectados
Cisco · Cisco SD-WAN SolutionCisco · Cisco SD-WAN vManageCisco · Cisco SD-WAN vSmartCVEs relacionadas — Cisco SD-WAN Solution
En el mismo producto, de las más peligrosas a las menos.
CVE-2020-27128MEDIUMCisco SD-WAN vManage Software Arbitrary File Creation VulnerabilityEPSS 58.5%CVE-2020-3387HIGHCisco SD-WAN vManage Software Remote Code Execution VulnerabilityEPSS 13.0%CVE-2019-1651CRITICALCisco SD-WAN Solution Buffer Overflow VulnerabilityEPSS 4.9%CVE-2019-1624HIGHCisco SD-WAN Solution Command Injection VulnerabilityEPSS 4.3%CVE-2020-3375CRITICALCisco SD-WAN Solution Software Buffer Overflow VulnerabilityEPSS 3.9%CVE-2019-1650HIGHCisco SD-WAN Solution Arbitrary File Overwrite VulnerabilityEPSS 3.5%