A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to consume excessive system memory and cause a denial of service (DoS) condition on an affected system. The vulnerability is due to inefficient memory management. An attacker could exploit this vulnerability by sending a large number of crafted HTTP requests to the affected web-based management interface. A successful exploit could allow the attacker to exhaust system memory, which could cause the system to stop processing new connections and could result in a DoS condition.
References
| Link | Resource |
|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-emvman-3y6LuTcZ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
23 May 2023, 13:55
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Cisco 1100-4gltegb Integrated Services Router
Cisco 1100-4g Integrated Services Router Cisco 1100-6g Integrated Services Router Cisco 1100-4gltena Integrated Services Router |
|
| CPE | cpe:2.3:h:cisco:isr1100-6g:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr1100-4gltegb:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr1100-4g:-:*:*:*:*:*:*:* |
cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:1100-4gltegb_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:1100-4gltena_integrated_services_router:-:*:*:*:*:*:*:* |
Information
Published : 2020-07-16 18:15
Updated : 2023-12-10 13:27
NVD link : CVE-2020-3372
Mitre link : CVE-2020-3372
CVE.ORG link : CVE-2020-3372
JSON object : View
Products Affected
cisco
- vedge_100m
- 1100-4gltegb_integrated_services_router
- sd-wan_firmware
- vedge_5000
- 1100-6g_integrated_services_router
- vedge_100wm
- 1100-4gltena_integrated_services_router
- 1100-4g_integrated_services_router
- vedge_2000
- vedge_100
- vedge_100b
- vedge_1000
CWE
CWE-400
Uncontrolled Resource Consumption