Product:
Cisco SD-WAN vEdge Software
Summary
A vulnerability in the access control list processing of IPv4 packets could allow an unauthenticated, remote attacker to bypass a configured ACL. This issue arises from improper enforcement of the implicit deny all at the end of a configured ACL. An attacker could exploit this vulnerability by sending unauthorized traffic to an interface on an affected device.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.8 | CVE-2025-20339 |
Exploitation
To exploit this vulnerability, an attacker would need to send unauthorized traffic to an interface on a device running the affected software. If successful, the attacker could bypass the configured access control list, potentially gaining unauthorized access to the network resources protected by the ACL.
Affected Products
- Cisco SD-WAN vEdge Software: Vulnerable due to improper enforcement of ACLs, allowing unauthorized traffic to bypass security measures.
Mitigation
To mitigate this vulnerability, it is recommended to review and update the access control lists on affected devices to ensure proper enforcement of security policies. Regular monitoring and auditing of network traffic can also help identify and prevent unauthorized access attempts.