CVE-2022-20624

CWE-400 — Uncontrolled Resource ConsumptionCWE-20 — Improper Input Validation4 documents4 sources
Severity
7.5HIGH
EPSS
5.8%
top 9.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Cisco Nx-os SoftwareCisco Nx-os
Timeline
PublishedFeb 23
Latest updateFeb 24

Description

A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of incoming CFSoIP packets. An attacker could exploit this vulnerability by sending crafted CFSoIP packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS co…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HExploitability: 3.9 | Impact: 4.0

Affected Packages2 packages

▶NVDcisco/nx-os6 versions+5

🔴Vulnerability Details

2
GHSA
GHSA-hrv6-4774-856p: A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause↗2022-02-24
▶
CVEList
Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability↗2022-02-23
▶

📋Vendor Advisories

1
Cisco
Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability↗2022-02-23
▶