5.8
Medium
CVE-2025-20339 A vulnerability in the access control list (ACL) processing of IPv4 packets of Cisco SD-WAN vEdge Software could allow…
Description
A vulnerability in the access control list (ACL) processing of IPv4 packets of Cisco SD-WAN vEdge Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the improper enforcement of the implicit deny all at the end of a configured ACL. An attacker could exploit this vulnerability by attempting to send unauthorized traffic to an interface on an affected device. A successful exploit could allow the attacker to bypass an ACL on the affected device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco SD-WAN vEdge Cloud 20.9 | 20.9.1 → 20.9.6 | No fix stated |
| Cisco SD-WAN vEdge Router 20.12 | 20.12.1 → 20.12.3.1 | No fix stated |
| Cisco SD-WAN vEdge Router 20.9 | 20.9.1 → 20.9.6 | No fix stated |
| Cisco SD-WAN vEdge Router 20.4 | 20.4.1 → 20.4.2.3 | No fix stated |
| Cisco SD-WAN vEdge Router 20.3 | 20.3.1 → 20.3.8 | No fix stated |
References
- cisco-sa-defaultacl-pSJk9nVF sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco SD-WAN vEdge Cloud
The 4 CVEs of Cisco SD-WAN vEdge Cloud →
CVE-2020-26071
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or…
8.4
High
CVE-2024-20496
A vulnerability in the UDP packet validation code of Cisco SD-WAN vEdge Software could allow an unauthenticated,…
6.1
Medium
CVE-2022-20775
Cisco SD-WAN Path Traversal Vulnerability
7.8
High