Details of VAR-202509-4014

ID

VAR-202509-4014

CVE

CVE-2025-20339

TITLE

Cisco SD-WAN vEdge access control error vulnerability (CNVD-2025-29472)

Trust: 0.6

sources: CNVD: CNVD-2025-29472

DESCRIPTION

A vulnerability in the access control list (ACL) processing of IPv4 packets of Cisco SD-WAN vEdge Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the improper enforcement of the implicit deny all at the end of a configured ACL. An attacker could exploit this vulnerability by attempting to send unauthorized traffic to an interface on an affected device. A successful exploit could allow the attacker to bypass an ACL on the affected device. Cisco SD-WAN vEdge is a router manufactured by Cisco Systems, Inc

Trust: 1.44

sources: NVD: CVE-2025-20339 // CNVD: CNVD-2025-29472

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2025-29472

AFFECTED PRODUCTS

vendor:	cisco	model:	sd-wan vedge cloud	scope:	eq	version:	20.9.1	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge cloud	scope:	eq	version:	20.9.1.1	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge cloud	scope:	eq	version:	20.9.2	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge cloud	scope:	eq	version:	20.9.3	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge cloud	scope:	eq	version:	20.9.3.1	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge cloud	scope:	eq	version:	20.9.2.2	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge cloud	scope:	eq	version:	20.9.2.3	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge cloud	scope:	eq	version:	20.9.4	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge cloud	scope:	eq	version:	20.9.5	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge cloud	scope:	eq	version:	20.9.5.1	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge cloud	scope:	eq	version:	20.9.6	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge cloud	scope:	eq	version:	20.9.5.3	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.3.1	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.3.2	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.4.1	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.4.1.1	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.3.3	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.4.1.2	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.4.2	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.3.4	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.3.5	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.9.1	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.3.6	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.9.2	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.3.7	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.9.3	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.3.3.2	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.3.4.3	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.9.3.1	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.3.7.1	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.3.5.1	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.4.2.3	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.9.2.2	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.3.7.2	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.9.2.3	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.9.4	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.12.1	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.3.8	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.9.4.1777	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.9.5	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.9.5.1	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.12.3.1	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.9.6	Trust: 0.6
vendor:	cisco	model:	sd-wan vedge router	scope:	eq	version:	20.9.5.3	Trust: 0.6

sources: CNVD: CNVD-2025-29472

CVSS

SEVERITY

CVSSV2

CVSSV3

psirt@cisco.com:	CVE-2025-20339
value:	MEDIUM
Trust: 1.0
CNVD:	CNVD-2025-29472
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2025-29472
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

psirt@cisco.com:	CVE-2025-20339
baseSeverity:	MEDIUM
baseScore:	5.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	CHANGED
confidentialityImpact:	NONE
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	1.4
version:	3.1
Trust: 1.0

sources: CNVD: CNVD-2025-29472 // NVD: CVE-2025-20339

PROBLEMTYPE DATA

problemtype:

CWE-284

Trust: 1.0

sources: NVD: CVE-2025-20339

PATCH

title:

Patch for Cisco SD-WAN vEdge access control error vulnerability (CNVD-2025-29472)

url:

https://www.cnvd.org.cn/patchInfo/show/752096

Trust: 0.6

sources: CNVD: CNVD-2025-29472

EXTERNAL IDS

db:	NVD	id:	CVE-2025-20339	Trust: 1.6
db:	CNVD	id:	CNVD-2025-29472	Trust: 0.6

sources: CNVD: CNVD-2025-29472 // NVD: CVE-2025-20339

REFERENCES

url:	https://sec.cloudapps.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-defaultacl-psjk9nvf	Trust: 1.0
url:	https://nvd.nist.gov/vuln/detail/cve-2025-20339	Trust: 0.6

sources: CNVD: CNVD-2025-29472 // NVD: CVE-2025-20339

SOURCES

db:	CNVD	id:	CNVD-2025-29472
db:	NVD	id:	CVE-2025-20339

LAST UPDATE DATE

2025-11-28T23:25:30.522000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2025-29472	date:	2025-11-27T00:00:00
db:	NVD	id:	CVE-2025-20339	date:	2025-09-24T18:11:24.520

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2025-29472	date:	2025-11-10T00:00:00
db:	NVD	id:	CVE-2025-20339	date:	2025-09-24T17:15:40.523