CVEvulnerability

CVE-2022-20823

8.6 HIGH Published 2022-08-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS 3.1 ([email protected])
8.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Weaknesses
CWE-125, CWE-126

Description

A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incomplete input validation of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending a malicious OSPFv3 link-state advertisement (LSA) to an affected device. A successful exploit could allow the attacker to cause the OSPFv3 process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition. Note: The OSPFv3 feature is disabled by default. To exploit this vulnerability, an attacker must be able to establish a full OSPFv3 neighbor state with an affected device. For more information about exploitation conditions, see the Details section of this advisory.

Affected configurations

• cisco nexus 3016 firmware • cisco nexus 3016q firmware • cisco nexus 3048 firmware • cisco nexus 3064 firmware • cisco nexus 3064-32t firmware • cisco nexus 3064-t firmware • cisco nexus 3064-x firmware • cisco nexus 3064t firmware • cisco nexus 3064x firmware • cisco nexus 3100 firmware • cisco nexus 3100-v firmware • cisco nexus 3100-z firmware • cisco nexus 3100v firmware • cisco nexus 31108pc-v firmware • cisco nexus 31108pv-v firmware • cisco nexus 31108tc-v firmware • cisco nexus 31128pq firmware • cisco nexus 3132c-z firmware • cisco nexus 3132q firmware • cisco nexus 3132q-v firmware • cisco nexus 3132q-x firmware • cisco nexus 3132q-x\/3132q-xl firmware • cisco nexus 3132q-xl firmware • cisco nexus 3164q firmware • cisco nexus 3172 firmware • cisco nexus 3172pq firmware • cisco nexus 3172pq-xl firmware • cisco nexus 3172pq\/pq-xl firmware • cisco nexus 3172tq firmware • cisco nexus 3172tq-32t firmware • cisco nexus 3172tq-xl firmware • cisco nexus 3200 firmware • cisco nexus 3232c firmware • cisco nexus 3232c firmware • cisco nexus 3264c-e firmware • cisco nexus 3264q firmware • cisco nexus 3400 firmware • cisco nexus 3408-s firmware • cisco nexus 34180yc firmware • cisco nexus 34200yc-sm firmware • cisco nexus 3432d-s firmware • cisco nexus 3464c firmware • cisco nexus 3500 firmware • cisco nexus 3500 platform firmware • cisco nexus 3524 firmware • cisco nexus 3524-x firmware • cisco nexus 3524-x\/xl firmware • cisco nexus 3524-xl firmware • cisco nexus 3548 firmware • cisco nexus 3548-x firmware • cisco nexus 3548-x\/xl firmware • cisco nexus 3548-xl firmware • cisco nexus 3600 firmware • cisco nexus 36180yc-r firmware • cisco nexus 3636c-r firmware • cisco nexus 5500 firmware • cisco nexus 5548p firmware • cisco nexus 5548up firmware • cisco nexus 5596t firmware • cisco nexus 5596up firmware … and 87 more

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-126 Buffer Over-read weakness

References