CVE-2022-20625

CWE-399CWE-20 — Improper Input Validation4 documents4 sources
Severity
4.3MEDIUM
EPSS
1.7%
top 17.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Cisco Firepower Extensible Operating SystemCisco Cisco Nx-os SoftwareCisco Nx-os
Timeline
PublishedFeb 23
Latest updateFeb 24

Description

A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to restart, resulting in a denial of service (DoS) condition. This vulnerability is due to improper handling of Cisco Discovery Protocol messages that are processed by the Cisco Discovery Protocol service. An attacker could exploit this vulnerability by sending a series of malicious Cisco Discovery Protocol messages to an a…

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 2.8 | Impact: 1.4

Affected Packages3 packages

▶NVDcisco/nx-os5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-834w-q34x-hqfh: A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attac↗2022-02-24
▶
CVEList
Cisco FXOS and NX-OS Software Cisco Discovery Protocol Service Denial of Service Vulnerability↗2022-02-23
▶

📋Vendor Advisories

1
Cisco
Cisco FXOS and NX-OS Software Cisco Discovery Protocol Service Denial of Service Vulnerability↗2022-02-23
▶