CVE-2024-20496 | BDVDB-2026-249259 Detail
CiscoCisco SD-WAN vEdge Cloud
Description#
A vulnerability in the UDP packet validation code of Cisco SD-WAN vEdge Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to incorrect handling of a specific type of malformed UDP packet. An attacker in a machine-in-the-middle position could exploit this vulnerability by sending crafted UDP packets to an affected device. A successful exploit could allow the attacker to cause the device to reboot, resulting in a DoS condition on the affected system.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: adjacent.
Weaknesses#
- CWE-787 Out-of-bounds Write
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.