Vulnerability Details : CVE-2020-3369
A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper processing of FTP traffic. An attacker could exploit this vulnerability by sending crafted FTP packets through an affected device. A successful exploit could allow the attacker to make the device reboot continuously, causing a DoS condition.
Vulnerability category: Denial of service
Products affected by CVE-2020-3369
- cpe:2.3:o:cisco:sd-wan_firmware:19.2.1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:sd-wan_firmware:19.2.0:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:sd-wan_firmware:19.2.097:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:sd-wan_firmware:19.2.098:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:vedge_cloud_router:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-3369
0.16%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 52 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-3369
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.8
|
HIGH | AV:N/AC:L/Au:N/C:N/I:N/A:C |
10.0
|
6.9
|
NIST | |
|
8.6
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
3.9
|
4.0
|
Cisco Systems, Inc. | |
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2020-3369
-
The product does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed using an index or pointer, such as memory or files.Assigned by: ykramarz@cisco.com (Secondary)
References for CVE-2020-3369
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fpdos-hORBfd9f
Cisco SD-WAN vEdge Routers Denial of Service VulnerabilityVendor Advisory
Jump to