CVEvulnerability

CVE-2022-20824

8.8 HIGH Published 2022-08-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-121, CWE-787

Description

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation of specific values that are within a Cisco Discovery Protocol message. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges or cause the Cisco Discovery Protocol process to crash and restart multiple times, which would cause the affected device to reload, resulting in a DoS condition. Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

Affected configurations

• cisco mds 9506 firmware • cisco mds 9513 firmware • cisco mds 9706 firmware • cisco mds 9710 firmware • cisco mds 9718 firmware • cisco nexus 1000v firmware • cisco nexus 3016 firmware • cisco nexus 3016q firmware • cisco nexus 3048 firmware • cisco nexus 3064 firmware • cisco nexus 3064-32t firmware • cisco nexus 3064-t firmware • cisco nexus 3064-x firmware • cisco nexus 3064t firmware • cisco nexus 3064x firmware • cisco nexus 3100 firmware • cisco nexus 3100-v firmware • cisco nexus 3100-z firmware • cisco nexus 3100v firmware • cisco nexus 31108pc-v firmware • cisco nexus 31108pv-v firmware • cisco nexus 31108tc-v firmware • cisco nexus 31128pq firmware • cisco nexus 3132c-z firmware • cisco nexus 3132q firmware • cisco nexus 3132q-v firmware • cisco nexus 3132q-x firmware • cisco nexus 3132q-x\/3132q-xl firmware • cisco nexus 3132q-xl firmware • cisco nexus 3164q firmware • cisco nexus 3172 firmware • cisco nexus 3172pq firmware • cisco nexus 3172pq-xl firmware • cisco nexus 3172pq\/pq-xl firmware • cisco nexus 3172tq firmware • cisco nexus 3172tq-32t firmware • cisco nexus 3172tq-xl firmware • cisco nexus 3200 firmware • cisco nexus 3232c firmware • cisco nexus 3232c firmware • cisco nexus 3264c-e firmware • cisco nexus 3264q firmware • cisco nexus 3400 firmware • cisco nexus 3408-s firmware • cisco nexus 34180yc firmware • cisco nexus 34200yc-sm firmware • cisco nexus 3432d-s firmware • cisco nexus 3464c firmware • cisco nexus 3524 firmware • cisco nexus 3524-x firmware • cisco nexus 3524-x\/xl firmware • cisco nexus 3524-xl firmware • cisco nexus 3548 firmware • cisco nexus 3548-x firmware • cisco nexus 3548-x\/xl firmware • cisco nexus 3548-xl firmware • cisco nexus 36180yc-r firmware • cisco nexus 3636c-r firmware • cisco nexus 5548p firmware • cisco nexus 5548up firmware … and 84 more

Related

Weakness · CWE (2)

  • CWE-121 Stack-based Buffer Overflow weakness
  • CWE-787 Out-of-bounds Write weakness

References