CVE-2022-20624
Last modified
CVE-2022-20624 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of incoming CFSoIP packets. EPSS estimates a 12.40% chance of exploitation in the next 30 days.
Description
A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of incoming CFSoIP packets. An attacker could exploit this vulnerability by sending crafted CFSoIP packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Nx-Os | 7.0\(3\) |
| Cisco | Nx-Os | 9.2\(2\) |
| Cisco | Nx-Os | 9.2\(3\) |
| Cisco | Nx-Os | 9.3\(3\) |
| Cisco | Nx-Os | 9.3\(5\) |
| Cisco | Nx-Os | 4.1\(1a\)a |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-20624?
How severe is CVE-2022-20624?
How do I fix CVE-2022-20624?
Are you affected by CVE-2022-20624?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST