Aller au contenu
en Se connecter
5.8 Moyenne

CVE-2025-20339 A vulnerability in the access control list (ACL) processing of IPv4 packets of Cisco SD-WAN vEdge Software could allow…

Description

A vulnerability in the access control list (ACL) processing of IPv4 packets of Cisco SD-WAN vEdge Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the improper enforcement of the implicit deny all at the end of a configured ACL. An attacker could exploit this vulnerability by attempting to send unauthorized traffic to an interface on an affected device. A successful exploit could allow the attacker to bypass an ACL on the affected device.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco SD-WAN vEdge Cloud 20.9 20.9.1 → 20.9.6 Pas de correctif indiqué
Cisco SD-WAN vEdge Router 20.12 20.12.1 → 20.12.3.1 Pas de correctif indiqué
Cisco SD-WAN vEdge Router 20.9 20.9.1 → 20.9.6 Pas de correctif indiqué
Cisco SD-WAN vEdge Router 20.4 20.4.1 → 20.4.2.3 Pas de correctif indiqué
Cisco SD-WAN vEdge Router 20.3 20.3.1 → 20.3.8 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco SD-WAN vEdge Cloud

Les 4 CVE de Cisco SD-WAN vEdge Cloud →
CVE-2020-26071 A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or… 8.4 Élevée CVE-2024-20496 A vulnerability in the UDP packet validation code of Cisco SD-WAN vEdge Software could allow an unauthenticated,… 6.1 Moyenne CVE-2022-20775 Cisco SD-WAN Path Traversal Vulnerability 7.8 Élevée
Suivre cette CVE