CVE-2020-3372 — Uncontrolled Resource Consumption in Cisco Sd-wan Firmware

CWE-400 — Uncontrolled Resource Consumption4 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
0.2%
top 61.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Sd-wan FirmwareCisco Sd-wan Vmanage
Timeline
PublishedJul 16
Latest updateMay 24

Description

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to consume excessive system memory and cause a denial of service (DoS) condition on an affected system. The vulnerability is due to inefficient memory management. An attacker could exploit this vulnerability by sending a large number of crafted HTTP requests to the affected web-based management interface. A successful exploit could allow the attacker to exhaust sys…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDcisco/sd-wan_firmware20.1.0 — 20.1.12+1

🔴Vulnerability Details

2
GHSA
GHSA-795h-g7ph-22h5: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to consume excess↗2022-05-24
▶
CVEList
Cisco SD-WAN vManage Software Denial of Service Vulnerability↗2020-07-16
▶

📋Vendor Advisories

1
Cisco
Cisco SD-WAN vManage Software Denial of Service Vulnerability↗2020-07-15
▶
CVE-2020-3372 — Uncontrolled Resource Consumption | cvebase