CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
52.7%
A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper validation of fields in Cisco SD-WAN peering messages that are encapsulated in UDP packets. An attacker could exploit this vulnerability by sending crafted UDP messages to the targeted system. A successful exploit could allow the attacker to cause services on the device to fail, resulting in a DoS condition that could impact the targeted device and other devices that depend on it.
Vendor | Product | Version | CPE |
---|---|---|---|
cisco | vedge_100 | - | cpe:2.3:h:cisco:vedge_100:-:*:*:*:*:*:*:* |
cisco | vedge_1000 | - | cpe:2.3:h:cisco:vedge_1000:-:*:*:*:*:*:*:* |
cisco | vedge_100b | - | cpe:2.3:h:cisco:vedge_100b:-:*:*:*:*:*:*:* |
cisco | vedge_100m | - | cpe:2.3:h:cisco:vedge_100m:-:*:*:*:*:*:*:* |
cisco | vedge_100wm | - | cpe:2.3:h:cisco:vedge_100wm:-:*:*:*:*:*:*:* |
cisco | vedge_2000 | - | cpe:2.3:h:cisco:vedge_2000:-:*:*:*:*:*:*:* |
cisco | vedge_5000 | - | cpe:2.3:h:cisco:vedge_5000:-:*:*:*:*:*:*:* |
cisco | sd-wan_firmware | * | cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:* |
cisco | vedge_cloud_router | - | cpe:2.3:a:cisco:vedge_cloud_router:-:*:*:*:*:*:*:* |
cisco | vsmart_controller | - | cpe:2.3:a:cisco:vsmart_controller:-:*:*:*:*:*:*:* |
[
{
"product": "Cisco SD-WAN Solution",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
52.7%