CVE-2020-3385

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN vEdge Routers (affected versions not specified) SD-WAN vEdge 5000 Series (affected versions not specified) SD-WAN vEdge Cloud (affected versions not specified)

Description A vulnerability in the deep packet inspection (DPI) engine could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected system. The issue is due to insufficient handling of malformed packets. An attacker could exploit this by sending crafted packets through an affected device, potentially causing the device to reboot and resulting in a DoS condition.

Recommendations For Cisco SD-WAN vEdge Routers, SD-WAN vEdge 5000 Series, and SD-WAN vEdge Cloud, at the moment, there is no information about a newer version that contains a fix for this vulnerability.