CVE-2020-3244

CVE-2020-3244 is a medium-severity vulnerability affecting Cisco ASR 5000 Series Aggregation Services Routers, including the ASR 5500 and ASR 5700 models, within their Enhanced Charging Service (ECS) functionality. An unauthenticated, remote attacker can exploit insufficient input validation by sending a malformed HTTP request. This allows them to bypass traffic classification rules, potentially avoiding billing for data consumption. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.