CVE-2022-20624

EPSS 12.4%
Veröffentlicht 23.02.2022 18:15:18
Zuletzt bearbeitet 21.11.2024 06:43:11
Erkennungen
Login

Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability

A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of incoming CFSoIP packets. An attacker could exploit this vulnerability by sending crafted CFSoIP packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 2 Referenzen 4

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Nx-os Version 7.0(3)

   Cisco ≫ N9k-c9316d-gx Version -
   Cisco ≫ N9k-c9332d-gx2b Version -
   Cisco ≫ N9k-c9348d-gx2a Version -
   Cisco ≫ N9k-c93600cd-gx Version -
   Cisco ≫ N9k-c9364d-gx2a Version -
   Cisco ≫ Nexus 3048 Version -
   Cisco ≫ Nexus 31108pc-v Version -
   Cisco ≫ Nexus 31108tc-v Version -
   Cisco ≫ Nexus 31128pq Version -
   Cisco ≫ Nexus 3132c-z Version -
   Cisco ≫ Nexus 3132q-v Version -
   Cisco ≫ Nexus 3132q-x Version -
   Cisco ≫ Nexus 3132q-xl Version -
   Cisco ≫ Nexus 3164q Version -
   Cisco ≫ Nexus 3172pq Version -
   Cisco ≫ Nexus 3172pq-xl Version -
   Cisco ≫ Nexus 3172tq-xl Version -
   Cisco ≫ Nexus 3232c Version -
   Cisco ≫ Nexus 3264c-e Version -
   Cisco ≫ Nexus 3264q Version -
   Cisco ≫ Nexus 3408-s Version -
   Cisco ≫ Nexus 34180yc Version -
   Cisco ≫ Nexus 3432d-s Version -
   Cisco ≫ Nexus 3464c Version -
   Cisco ≫ Nexus 3524-x Version -
   Cisco ≫ Nexus 3524-xl Version -
   Cisco ≫ Nexus 3548-x Version -
   Cisco ≫ Nexus 3548-xl Version -
   Cisco ≫ Nexus 36180yc-r Version -
   Cisco ≫ Nexus 3636c-r Version -
   Cisco ≫ Nexus 92160yc-x Version -
   Cisco ≫ Nexus 92300yc Version -
   Cisco ≫ Nexus 92304qc Version -
   Cisco ≫ Nexus 92348gc-x Version -
   Cisco ≫ Nexus 9236c Version -
   Cisco ≫ Nexus 9272q Version -
   Cisco ≫ Nexus 9504 Version -
   Cisco ≫ Nexus 9508 Version -
   Cisco ≫ Nexus 9516 Version -

Cisco ≫ Nx-os Version 9.2(2)

Cisco ≫ Nx-os Version 9.2(3)

Cisco ≫ Nx-os Version 9.3(3)

Cisco ≫ Nx-os Version 9.3(5)

Cisco ≫ Nx-os Version 4.1(1a)a

Cisco ≫ Ucs 64108 Version -
Cisco ≫ Ucs 6454 Version -

Cisco ≫ Nx-os Version 7.0(3)

Cisco ≫ Ucs 64108 Version -
Cisco ≫ Ucs 6454 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	12.4%	0.957

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C
Cisco PSIRT	8.6	3.9	4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cfsoip-dos-tpykyDr

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-20624

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-20624

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-20624

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2022-20624