CVE-2022-20678

A vulnerability in the AppNav-XE feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of certain TCP segments. An attacker could exploit this vulnerability by sending a stream of crafted TCP traffic at a high rate through an interface of an affected device. That interface would need to have AppNav interception enabled. A successful exploit could allow the attacker to cause the device to reload.

• CWE-413
• CWE-755

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-appnav-xe-dos-j5MXTR4Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-appnav-xe-dos-j5MXTR4Vendor Advisory

Published

Apr 15, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20672Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2022-20673Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2022-20674Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2022-20675A vulnerability in the TCP/IP stack of Cisco Email Security …5.3
• CVE-2022-20676A vulnerability in the Tool Command Language (Tcl) interpret…6.7
• CVE-2022-20677Multiple vulnerabilities in the Cisco IOx application hostin…6.7
• CVE-2022-20679A vulnerability in the IPSec decryption routine of Cisco IOS…7.7
• CVE-2022-2068In addition to the c_rehash shell command injection identifi…7.3
• CVE-2022-20680A vulnerability in the web-based management interface of Cis…6.5
• CVE-2022-20681A vulnerability in the CLI of Cisco IOS XE Software for Cisc…7.8
• CVE-2022-20682A vulnerability in the Control and Provisioning of Wireless …8.6
• CVE-2022-20683A vulnerability in the Application Visibility and Control (A…8.6