CVE-2024-20496

Summary

CVE-2024-20496 is a newly disclosed vulnerability affecting Cisco SD-WAN vEdge Software. This issue stems from a defect in the UDP packet validation functionality, which could be exploited by an unauthenticated, adjacent attacker. By sending malformed UDP packets to an affected device, an adversary in a machine-in-the-middle position can trigger a reboot, leading to a denial of service (DoS) condition on the vulnerable system. The vulnerability originates from the software's incorrect handling of specific types of UDP packets, making it critical that affected organizations apply the necessary patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.