Buffer Overflow Vulnerability in Multiple Cisco SD-WAN Products

Cisco SD-WAN vEdge is a router from Cisco. Cisco SD-WAN vManage is a software that provides software-defined networking capabilities from Cisco. The software provides a way to virtualize the network. A buffer overflow vulnerability exists in several Cisco SD-WAN products. The vulnerability stems from the program’s failure to properly authenticate checks for input to the SNMPv3 management function. An unauthenticated remote attacker could exploit the vulnerability by sending specially crafted SNMPv3 traffic to a specific device to cause a denial of service of the device.