Cisco SD-WAN Solution 资源管理错误漏洞

漏洞介绍

Cisco SD-WAN Solution是美国思科（Cisco）公司的一套网络扩展解决方案。

Cisco SD-WAN Solution 17.2.7之前版本和18.3.0之前版本中存在资源管理错误漏洞。远程攻击者可借助特制消息利用该漏洞导致拒绝服务。以下产品及版本受到影响：Cisco SD-WAN vBond Orchestrator；SD-WAN vEdge 100 Series Routers；SD-WAN vEdge 1000 Series Routers；SD-WAN vEdge 2000 Series Routers；SD-WAN vEdge 5000 Series Routers；SD-WAN vEdge Cloud Router；SD-WAN vManage；SD-WAN vSmart Controller。

漏洞补丁

目前厂商已发布升级了Cisco SD-WAN Solution 资源管理错误漏洞的补丁，Cisco SD-WAN Solution 资源管理错误漏洞的补丁获取链接：

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdw-dos-KWOdyHnB

参考网址

来源:CISCO

链接：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdw-dos-KWOdyHnB

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.2424/

来源:nvd.nist.gov

链接：https://nvd.nist.gov/vuln/detail/CVE-2020-3351

来源:tools.cisco.com

链接：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdw-dos-KWOdyHnB

来源:vigilance.fr

链接：https://vigilance.fr/vulnerability/Cisco-SD-WAN-Solution-Software-denial-of-service-via-Encapsulated-Peering-Messages-32857

受影响实体

暂无

信息来源

http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-202007-1102