Cisco SD-WAN Solution Packet Filtering Bypass Vulnerability

Vulnerability

The vulnerability exists in the packet filtering features of Cisco SD-WAN Solution. It is due to improper traffic filtering conditions on an affected device. Affected versions include those before 18.4.4, before 19.2.1, and before 19.3.0 [1].

Exploitation

An unauthenticated, remote attacker can exploit this vulnerability by crafting a malicious TCP packet with specific characteristics and sending it to a target device. No authentication or user interaction is required [1].

Impact

Successful exploitation allows the attacker to bypass L3 and L4 traffic filters and inject an arbitrary packet into the network, potentially leading to further compromise [1].

Mitigation

Cisco has released fixed versions: 18.4.4 and later, 19.2.1 and later, and 19.3.0 and later. Customers should upgrade to these releases. No workaround is available [1].