Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ios_xe_sd-wan | Cisco | - (including) | - (including) |
| Sd-wan_firmware | Cisco | 18.3.5 (including) | 18.3.5 (including) |
| Sd-wan_firmware | Cisco | 18.3.8 (including) | 18.3.8 (including) |
| Sd-wan_firmware | Cisco | 18.4.1 (including) | 18.4.1 (including) |
| Sd-wan_firmware | Cisco | 18.4.4 (including) | 18.4.4 (including) |
| Sd-wan_firmware | Cisco | 18.4.5 (including) | 18.4.5 (including) |
| Sd-wan_firmware | Cisco | 19.2.0 (including) | 19.2.0 (including) |
| Sd-wan_firmware | Cisco | 19.2.1 (including) | 19.2.1 (including) |
| Sd-wan_firmware | Cisco | 19.2.2 (including) | 19.2.2 (including) |
| Sd-wan_firmware | Cisco | 19.2.99 (including) | 19.2.99 (including) |
| Sd-wan_firmware | Cisco | 20.1.0 (including) | 20.1.0 (including) |
| Sd-wan_vsmart_controller_firmware | Cisco | * | * |