CVE-2022-20823

A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incomplete input validation of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending a malicious OSPFv3 link-state advertisement (LSA) to an affected device. A successful exploit could allow the attacker to cause the OSPFv3 process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition. Note: The OSPFv3 feature is disabled by default. To exploit this vulnerability, an attacker must be able to establish a full OSPFv3 neighbor state with an affected device. For more information about exploitation conditions, see the Details section of this advisory.

• CWE-126
• CWE-125

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ospfv3-dos-48qutcuVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ospfv3-dos-48qutcuVendor Advisory

Published

Aug 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20817A vulnerability in Cisco Unified IP Phones could allow an un…7.4
• CVE-2022-20818Multiple vulnerabilities in the CLI of Cisco SD-WAN Software…7.8
• CVE-2022-20819A vulnerability in the web-based management interface of Cis…6.5
• CVE-2022-20820Multiple vulnerabilities in the web interface of Cisco Webex…5.4
• CVE-2022-20821A vulnerability in the health check RPM of Cisco IOS XR Soft…6.5
• CVE-2022-20822A vulnerability in the web-based management interface of Cis…8.1
• CVE-2022-20824A vulnerability in the Cisco Discovery Protocol feature of C…8.8
• CVE-2022-20825A vulnerability in the web-based management interface of Cis…9.8
• CVE-2022-20826A vulnerability in the secure boot implementation of Cisco S…6.8
• CVE-2022-20827Multiple vulnerabilities in Cisco Small Business RV160, RV26…10
• CVE-2022-20828A vulnerability in the CLI parser of Cisco FirePOWER Softwar…7.2
• CVE-2022-20829A vulnerability in the packaging of Cisco Adaptive Security …7.2