CVE-2022-20915

A vulnerability in the implementation of IPv6 VPN over MPLS (6VPE) with Zone-Based Firewall (ZBFW) of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling of an IPv6 packet that is forwarded from an MPLS and ZBFW-enabled interface in a 6VPE deployment. An attacker could exploit this vulnerability by sending a crafted IPv6 packet sourced from a device on the IPv6-enabled virtual routing and forwarding (VRF) interface through the affected device. A successful exploit could allow the attacker to reload the device, resulting in a DoS condition.

• CWE-115
• CWE-436

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-6vpe-dos-tJBtf5ZvVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-6vpe-dos-tJBtf5ZvVendor Advisory

Published

Oct 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2091The Cache Images WordPress plugin before 3.2.1 does not impl…6.5
• CVE-2022-20910Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2022-20911Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2022-20912Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2022-20913A vulnerability in Cisco Nexus Dashboard could allow an auth…6.5
• CVE-2022-20914A vulnerability in the External RESTful Services (ERS) API o…4.9
• CVE-2022-20916A vulnerability in the web-based management interface of Cis…6.1
• CVE-2022-20917A vulnerability in the Extensible Messaging and Presence Pro…4.3
• CVE-2022-20918A vulnerability in the Simple Network Management Protocol (S…7.5
• CVE-2022-20919A vulnerability in the processing of malformed Common Indust…7.5
• CVE-2022-2092The WooCommerce PDF Invoices & Packing Slips WordPress plugi…6.1
• CVE-2022-20920A vulnerability in the SSH implementation of Cisco IOS Softw…7.7