CVE-2020-3372
Description
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to consume excessive system memory and cause a denial of service (DoS) condition on an affected system. The vulnerability is due to inefficient memory management. An attacker could exploit this vulnerability by sending a large number of crafted HTTP requests to the affected web-based management interface. A successful exploit could allow the attacker to exhaust system memory, which could cause the system to stop processing new connections and could result in a DoS condition.
How to fix
- cisco sd-wan_firmware19.2.3, 20.1.12 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco sd-wan_firmware | v < 19.2.3, 20.1.0 ≤ v < 20.1.12 | 19.2.3, 20.1.12 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.