6.1

CVE-2022-20625

A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to restart, resulting in a denial of service (DoS) condition. This vulnerability is due to improper handling of Cisco Discovery Protocol messages that are processed by the Cisco Discovery Protocol service. An attacker could exploit this vulnerability by sending a series of malicious Cisco Discovery Protocol messages to an affected device. A successful exploit could allow the attacker to cause the Cisco Discovery Protocol service to fail and restart. In rare conditions, repeated failures of the process could occur, which could cause the entire device to restart.

Data is provided by the National Vulnerability Database (NVD)
CiscoFirepower Extensible Operating System Version < 2.3.1.219
   CiscoFirepower 4110 Version-
   CiscoFirepower 4112 Version-
   CiscoFirepower 4115 Version-
   CiscoFirepower 4120 Version-
   CiscoFirepower 4125 Version-
   CiscoFirepower 4140 Version-
   CiscoFirepower 4145 Version-
   CiscoFirepower 4150 Version-
   CiscoFirepower 9300 Version-
CiscoFirepower Extensible Operating System Version >= 2.4 < 2.9.1.158
   CiscoFirepower 4110 Version-
   CiscoFirepower 4112 Version-
   CiscoFirepower 4115 Version-
   CiscoFirepower 4120 Version-
   CiscoFirepower 4125 Version-
   CiscoFirepower 4140 Version-
   CiscoFirepower 4145 Version-
   CiscoFirepower 4150 Version-
   CiscoFirepower 9300 Version-
CiscoFirepower Extensible Operating System Version >= 2.10 < 2.10.1.179
   CiscoFirepower 4110 Version-
   CiscoFirepower 4112 Version-
   CiscoFirepower 4115 Version-
   CiscoFirepower 4120 Version-
   CiscoFirepower 4125 Version-
   CiscoFirepower 4140 Version-
   CiscoFirepower 4145 Version-
   CiscoFirepower 4150 Version-
   CiscoFirepower 9300 Version-
CiscoNx-os Version8.2(7.34)
   CiscoMds 9132t Version-
   CiscoMds 9148s Version-
   CiscoMds 9148t Version-
   CiscoMds 9222i Version-
   CiscoMds 9250i Version-
   CiscoMds 9396s Version-
   CiscoMds 9396t Version-
   CiscoMds 9506 Version-
   CiscoMds 9513 Version-
   CiscoMds 9706 Version-
   CiscoMds 9710 Version-
   CiscoMds 9718 Version-
   CiscoN77-f312ck-26 Version-
   CiscoN77-f324fq-25 Version-
   CiscoN77-f348xp-23 Version-
   CiscoN77-f430cq-36 Version-
   CiscoN77-m312cq-26l Version-
   CiscoN77-m324fq-25l Version-
   CiscoN77-m348xp-23l Version-
   CiscoN7k-f248xp-25e Version-
   CiscoN7k-f306ck-25 Version-
   CiscoN7k-f312fq-25 Version-
   CiscoN7k-m202cf-22l Version-
   CiscoN7k-m206fq-23l Version-
   CiscoN7k-m224xp-23l Version-
   CiscoN7k-m324fq-25l Version-
   CiscoN7k-m348xp-25l Version-
   CiscoNexus 7000 10-slot Version-
   CiscoNexus 7000 18-slot Version-
   CiscoNexus 7000 4-slot Version-
   CiscoNexus 7000 9-slot Version-
   CiscoNexus 7000 Supervisor 1 Version-
   CiscoNexus 7000 Supervisor 2 Version-
   CiscoNexus 7000 Supervisor 2e Version-
   CiscoNexus 7700 10-slot Version-
   CiscoNexus 7700 18-slot Version-
   CiscoNexus 7700 2-slot Version-
   CiscoNexus 7700 6-slot Version-
   CiscoNexus 7700 Supervisor 2e Version-
   CiscoNexus 7700 Supervisor 3e Version-
CiscoNx-os Version5.2(1)sv5(1.3b)
   CiscoNexus 1000v Version- SwPlatformmicrosoft_hyper-v
   CiscoNexus 1000v Version- SwPlatformvmware_vsphere
   CiscoNexus 1000ve Version- SwPlatformvsphere
CiscoNx-os Version9.3(8.15)
   CiscoN9k-c9316d-gx Version-
   CiscoN9k-c9332d-gx2b Version-
   CiscoN9k-c9348d-gx2a Version-
   CiscoN9k-c93600cd-gx Version-
   CiscoN9k-c9364d-gx2a Version-
   CiscoNexus 1000v Version- SwPlatformvmware_vsphere
   CiscoNexus 3048 Version-
   CiscoNexus 31108pc-v Version-
   CiscoNexus 31108tc-v Version-
   CiscoNexus 31128pq Version-
   CiscoNexus 3132c-z Version-
   CiscoNexus 3132q-v Version-
   CiscoNexus 3132q-x Version-
   CiscoNexus 3132q-xl Version-
   CiscoNexus 3164q Version-
   CiscoNexus 3172pq Version-
   CiscoNexus 3172pq-xl Version-
   CiscoNexus 3172tq-xl Version-
   CiscoNexus 3232c Version-
   CiscoNexus 3264c-e Version-
   CiscoNexus 3264q Version-
   CiscoNexus 3408-s Version-
   CiscoNexus 34180yc Version-
   CiscoNexus 3432d-s Version-
   CiscoNexus 3464c Version-
   CiscoNexus 3524-x Version-
   CiscoNexus 3524-xl Version-
   CiscoNexus 3548-x Version-
   CiscoNexus 3548-xl Version-
   CiscoNexus 36180yc-r Version-
   CiscoNexus 3636c-r Version-
   CiscoNexus 92160yc-x Version-
   CiscoNexus 92300yc Version-
   CiscoNexus 92304qc Version-
   CiscoNexus 92348gc-x Version-
   CiscoNexus 9236c Version-
   CiscoNexus 9272q Version-
   CiscoNexus 93108tc-ex Version-
   CiscoNexus 93108tc-fx Version-
   CiscoNexus 93108tc-fx3p Version-
   CiscoNexus 93120tx Version-
   CiscoNexus 93216tc-fx2 Version-
   CiscoNexus 9332c Version-
   CiscoNexus 9336c-fx2 Version-
   CiscoNexus 9336c-fx2-e Version-
   CiscoNexus 9348gc-fxp Version-
   CiscoNexus 9364c Version-
   CiscoNexus 9364c-gx Version-
   CiscoNexus 9504 Version-
   CiscoNexus 9508 Version-
   CiscoNexus 9516 Version-
CiscoNx-os Version4.0(1a)a
   CiscoUcs 64108 Version-
   CiscoUcs 6454 Version-
CiscoNx-os Version4.1(3f)c
   CiscoUcs 6248up Version-
   CiscoUcs 6296up Version-
   CiscoUcs 6324 Version-
   CiscoUcs 6332 Version-
   CiscoUcs 6332-16up Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.49% 0.847
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 2.8 1.4
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
nvd@nist.gov 6.1 6.5 6.9
AV:A/AC:L/Au:N/C:N/I:N/A:C
psirt@cisco.com 4.3 2.8 1.4
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L