CVE-2022-20758

A vulnerability in the implementation of the Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the incorrect processing of a BGP update message that contains specific EVPN attributes. An attacker could exploit this vulnerability by sending a BGP update message that contains specific EVPN attributes. To exploit this vulnerability, an attacker must control a BGP speaker that has an established trusted peer connection to an affected device that is configured with the address family L2VPN EVPN to receive and process the update message. This vulnerability cannot be exploited by any data that is initiated by clients on the Layer 2 network or by peers that are not configured to accept the L2VPN EVPN address family. A successful exploit could allow the attacker to cause the BGP process to restart unexpectedly, resulting in a DoS condition. The Cisco implementation of BGP accepts incoming BGP updates only from explicitly defined peers. For this vulnerability to be exploited, the malicious BGP update message must either come from a configured, valid BGP peer or be injected by the attacker into the affected BGP network on an existing, valid TCP connection to a BGP peer.

• CWE-399

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bgpevpn-zWTRtPBbVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bgpevpn-zWTRtPBbVendor Advisory

Published

Apr 15, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20752A vulnerability in Cisco Unified Communications Manager (Uni…5.3
• CVE-2022-20753A vulnerability in web-based management interface of Cisco S…7.2
• CVE-2022-20754Multiple vulnerabilities in the API and web-based management…7.2
• CVE-2022-20755Multiple vulnerabilities in the API and web-based management…7.2
• CVE-2022-20756A vulnerability in the RADIUS feature of Cisco Identity Serv…7.5
• CVE-2022-20757A vulnerability in the connection handling function in Cisco…7.5
• CVE-2022-20759A vulnerability in the web services interface for remote acc…8.8
• CVE-2022-2076Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-20760A vulnerability in the DNS inspection handler of Cisco Adapt…7.5
• CVE-2022-20761A vulnerability in the integrated wireless access point (AP)…6.5
• CVE-2022-20762A vulnerability in the Common Execution Environment (CEE) Co…7.8
• CVE-2022-20763A vulnerability in the login authorization components of Cis…8.8