CVE-2020-3244

A vulnerability in the Enhanced Charging Service (ECS) functionality of Cisco ASR 5000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass the traffic classification rules on an affected device. The vulnerability is due to insufficient input validation of user traffic going through an affected device. An attacker could exploit this vulnerability by sending a malformed HTTP request to an affected device. A successful exploit could allow the attacker to bypass the traffic classification rules and potentially avoid being charged for traffic consumption.

• CWE-20
• CWE-20

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr5k-ecs-bypass-2LqfPCLVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr5k-ecs-bypass-2LqfPCLVendor Advisory

Published

Jun 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3238A vulnerability in the Cisco Application Framework component…8.1
• CVE-2020-3239Multiple vulnerabilities in the REST API of Cisco UCS Direct…8.8
• CVE-2020-3240Multiple vulnerabilities in the REST API of Cisco UCS Direct…7.3
• CVE-2020-3241A vulnerability in the orchestration tasks of Cisco UCS Dire…6.5
• CVE-2020-3242A vulnerability in the REST API of Cisco UCS Director could …4.9
• CVE-2020-3243Multiple vulnerabilities in the REST API of Cisco UCS Direct…9.8
• CVE-2020-3245A vulnerability in the web application of Cisco Smart Softwa…5.3
• CVE-2020-3246A vulnerability in the web server of Cisco Umbrella could al…4.3
• CVE-2020-3247Multiple vulnerabilities in the REST API of Cisco UCS Direct…9.8
• CVE-2020-3248Multiple vulnerabilities in the REST API of Cisco UCS Direct…9.8
• CVE-2020-3249Multiple vulnerabilities in the REST API of Cisco UCS Direct…7.5
• CVE-2020-3250Multiple vulnerabilities in the REST API of Cisco UCS Direct…9.8