CVE-2024-20496

Summary

A vulnerability in the UDP packet validation code of Cisco SD-WAN vEdge Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected system.

This vulnerability is due to incorrect handling of a specific type of malformed UDP packet. An attacker in a machine-in-the-middle position could exploit this vulnerability by sending crafted UDP packets to an affected device. A successful exploit could allow the attacker to cause the device to reboot, resulting in a DoS condition on the affected system.

Affected Software

VendorProductVersion RangeStatus
CiscoCisco SD-WAN vEdge Cloud19.2.1affected
CiscoCisco SD-WAN vEdge Cloud20.1.12affected
CiscoCisco SD-WAN vEdge Cloud18.4.4affected
CiscoCisco SD-WAN vEdge Cloud19.3.0affected
CiscoCisco SD-WAN vEdge Cloud18.3.8affected
CiscoCisco SD-WAN vEdge Cloud19.2.2affected
CiscoCisco SD-WAN vEdge Cloud20.1.1affected
CiscoCisco SD-WAN vEdge Cloud18.3.6affected
CiscoCisco SD-WAN vEdge Cloud18.4.3affected
CiscoCisco SD-WAN vEdge Cloud18.4.302affected
CiscoCisco SD-WAN vEdge Cloud18.4.5affected
CiscoCisco SD-WAN vEdge Cloud18.4.303affected
CiscoCisco SD-WAN vEdge Cloud19.2.098affected
CiscoCisco SD-WAN vEdge Cloud19.1.0affected
CiscoCisco SD-WAN vEdge Cloud19.0.1aaffected
CiscoCisco SD-WAN vEdge Cloud19.2.099affected
CiscoCisco SD-WAN vEdge Cloud18.3.7affected
CiscoCisco SD-WAN vEdge Cloud19.2.097affected
CiscoCisco SD-WAN vEdge Cloud18.3.1affected
CiscoCisco SD-WAN vEdge Cloud19.2.0affected
CiscoCisco SD-WAN vEdge Cloud18.3.4affected
CiscoCisco SD-WAN vEdge Cloud18.2.0affected
CiscoCisco SD-WAN vEdge Cloud18.4.1affected
CiscoCisco SD-WAN vEdge Cloud18.4.0affected
CiscoCisco SD-WAN vEdge Cloud18.3.5affected
CiscoCisco SD-WAN vEdge Cloud18.3.3affected
CiscoCisco SD-WAN vEdge Cloud18.3.0affected
CiscoCisco SD-WAN vEdge Cloud19.2.3affected
CiscoCisco SD-WAN vEdge Cloud20.3.1affected
CiscoCisco SD-WAN vEdge Cloud20.1.2affected
CiscoCisco SD-WAN vEdge Cloud19.2.929affected
CiscoCisco SD-WAN vEdge Cloud19.2.31affected
CiscoCisco SD-WAN vEdge Cloud20.3.2affected
CiscoCisco SD-WAN vEdge Cloud19.2.32affected
CiscoCisco SD-WAN vEdge Cloud18.4.6affected
CiscoCisco SD-WAN vEdge Cloud20.4.1affected
CiscoCisco SD-WAN vEdge Cloud19.2.4affected
CiscoCisco SD-WAN vEdge Cloud20.4.1.1affected
CiscoCisco SD-WAN vEdge Cloud20.3.3affected
CiscoCisco SD-WAN vEdge Cloud20.5.1affected
CiscoCisco SD-WAN vEdge Cloud20.1.3affected
CiscoCisco SD-WAN vEdge Cloud20.4.1.2affected
CiscoCisco SD-WAN vEdge Cloud20.4.2affected
CiscoCisco SD-WAN vEdge Cloud20.3.4affected
CiscoCisco SD-WAN vEdge Cloud20.6.1affected
CiscoCisco SD-WAN vEdge Cloud20.6.2affected
CiscoCisco SD-WAN vEdge Cloud20.7.1affected
CiscoCisco SD-WAN vEdge Cloud20.3.5affected
CiscoCisco SD-WAN vEdge Cloud20.6.3affected
CiscoCisco SD-WAN vEdge Cloud20.8.1affected
CiscoCisco SD-WAN vEdge Cloud20.7.2affected
CiscoCisco SD-WAN vEdge Cloud20.6.4affected
CiscoCisco SD-WAN vEdge Cloud20.9.1affected
CiscoCisco SD-WAN vEdge Cloud20.3.6affected
CiscoCisco SD-WAN vEdge Cloud20.9.1.1affected
CiscoCisco SD-WAN vEdge Cloud20.9.2affected
CiscoCisco SD-WAN vEdge Cloud20.6.5affected
CiscoCisco SD-WAN vEdge Cloud20.3.7affected
CiscoCisco SD-WAN vEdge Cloud20.9.3affected
CiscoCisco SD-WAN vEdge Cloud20.4.2.3affected
CiscoCisco SD-WAN vEdge Cloud20.3.4.3affected
CiscoCisco SD-WAN vEdge Cloud20.6.4.1affected
CiscoCisco SD-WAN vEdge Cloud20.6.3.2affected
CiscoCisco SD-WAN vEdge Cloud20.3.5.1affected
CiscoCisco SD-WAN vEdge Cloud20.9.3.1affected
CiscoCisco SD-WAN vEdge Cloud20.6.5.2affected
CiscoCisco SD-WAN vEdge Cloud20.3.7.1affected
CiscoCisco SD-WAN vEdge Cloud20.3.3.2affected
CiscoCisco SD-WAN vEdge Cloud20.6.1.2affected
CiscoCisco SD-WAN vEdge Cloud20.1.3.1affected
CiscoCisco SD-WAN vEdge Cloud20.9.2.2affected
CiscoCisco SD-WAN vEdge Cloud20.6.5.3affected
CiscoCisco SD-WAN vEdge Cloud20.6.3.3affected
CiscoCisco SD-WAN vEdge Cloud20.3.7.2affected
CiscoCisco SD-WAN vEdge Cloud20.6.5.4affected
CiscoCisco SD-WAN vEdge Cloud20.9.2.3affected
CiscoCisco SD-WAN vEdge Cloud20.3.8affected
CiscoCisco SD-WAN vEdge router18.4.303affected
CiscoCisco SD-WAN vEdge router18.3.7affected
CiscoCisco SD-WAN vEdge router19.3.0affected
CiscoCisco SD-WAN vEdge router18.2.0affected
CiscoCisco SD-WAN vEdge router20.1.12affected
CiscoCisco SD-WAN vEdge router19.2.099affected
CiscoCisco SD-WAN vEdge router18.3.3affected
CiscoCisco SD-WAN vEdge router18.3.6affected
CiscoCisco SD-WAN vEdge router19.0.0affected
CiscoCisco SD-WAN vEdge router18.4.0affected
CiscoCisco SD-WAN vEdge router19.1.01affected
CiscoCisco SD-WAN vEdge router19.2.098affected
CiscoCisco SD-WAN vEdge router18.3.1affected
CiscoCisco SD-WAN vEdge router18.4.302affected
CiscoCisco SD-WAN vEdge router19.2.2affected
CiscoCisco SD-WAN vEdge router18.3.5affected
CiscoCisco SD-WAN vEdge router19.1.0affected
CiscoCisco SD-WAN vEdge router20.1.11affected
CiscoCisco SD-WAN vEdge router19.2.097affected
CiscoCisco SD-WAN vEdge router18.4.5affected
CiscoCisco SD-WAN vEdge router18.3.8affected
CiscoCisco SD-WAN vEdge router18.3.0affected
CiscoCisco SD-WAN vEdge router18.4.3affected
CiscoCisco SD-WAN vEdge router18.4.4affected
CiscoCisco SD-WAN vEdge router19.2.1affected
CiscoCisco SD-WAN vEdge router18.3.4affected
CiscoCisco SD-WAN vEdge router19.0.1aaffected
CiscoCisco SD-WAN vEdge router20.1.1affected
CiscoCisco SD-WAN vEdge router18.4.1affected
CiscoCisco SD-WAN vEdge router19.2.0affected
CiscoCisco SD-WAN vEdge router19.2.3affected
CiscoCisco SD-WAN vEdge router20.3.1affected
CiscoCisco SD-WAN vEdge router20.1.2affected
CiscoCisco SD-WAN vEdge router19.2.929affected
CiscoCisco SD-WAN vEdge router19.2.31affected
CiscoCisco SD-WAN vEdge router20.3.2affected
CiscoCisco SD-WAN vEdge router19.2.32affected
CiscoCisco SD-WAN vEdge router18.4.6affected
CiscoCisco SD-WAN vEdge router20.4.1affected
CiscoCisco SD-WAN vEdge router19.2.4affected
CiscoCisco SD-WAN vEdge router20.4.1.1affected
CiscoCisco SD-WAN vEdge router20.3.3affected
CiscoCisco SD-WAN vEdge router20.5.1affected
CiscoCisco SD-WAN vEdge router20.1.3affected
CiscoCisco SD-WAN vEdge router20.4.1.2affected
CiscoCisco SD-WAN vEdge router20.4.2affected
CiscoCisco SD-WAN vEdge router20.3.4affected
CiscoCisco SD-WAN vEdge router20.6.1affected
CiscoCisco SD-WAN vEdge router20.6.2affected
CiscoCisco SD-WAN vEdge router20.7.1affected
CiscoCisco SD-WAN vEdge router20.7.1.2affected
CiscoCisco SD-WAN vEdge router20.3.5affected
CiscoCisco SD-WAN vEdge router20.9.1affected
CiscoCisco SD-WAN vEdge router20.6.3affected
CiscoCisco SD-WAN vEdge router20.8.1affected
CiscoCisco SD-WAN vEdge router20.7.2affected
CiscoCisco SD-WAN vEdge router20.6.4affected
CiscoCisco SD-WAN vEdge router20.3.6affected
CiscoCisco SD-WAN vEdge router20.9.2affected
CiscoCisco SD-WAN vEdge router20.6.5affected
CiscoCisco SD-WAN vEdge router20.3.7affected
CiscoCisco SD-WAN vEdge router20.9.3affected
CiscoCisco SD-WAN vEdge router20.6.5.1affected
CiscoCisco SD-WAN vEdge router20.3.3.2affected
CiscoCisco SD-WAN vEdge router20.6.4.1affected
CiscoCisco SD-WAN vEdge router20.6.3.2affected
CiscoCisco SD-WAN vEdge router20.3.4.3affected
CiscoCisco SD-WAN vEdge router20.6.5.2affected
CiscoCisco SD-WAN vEdge router20.9.3.1affected
CiscoCisco SD-WAN vEdge router20.3.7.1affected
CiscoCisco SD-WAN vEdge router20.3.5.1affected
CiscoCisco SD-WAN vEdge router20.4.2.3affected
CiscoCisco SD-WAN vEdge router20.6.1.2affected
CiscoCisco SD-WAN vEdge router20.9.2.2affected
CiscoCisco SD-WAN vEdge router20.1.3.1affected
CiscoCisco SD-WAN vEdge router20.6.5.3affected
CiscoCisco SD-WAN vEdge router20.6.3.3affected
CiscoCisco SD-WAN vEdge router20.3.7.2affected
CiscoCisco SD-WAN vEdge router20.6.5.4affected
CiscoCisco SD-WAN vEdge router20.9.2.3affected
CiscoCisco SD-WAN vEdge router20.3.8affected

Weaknesses

  • CWE-787: Out-of-bounds Write

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References