HIGH✓ PATCH🇬🇧 English

CVE-2022-20697

CVSS 8.6v3.1pub. 2022-04-15upd. 2024-11-21

A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper resource management in the HTTP server code. An attacker could exploit this vulnerability by sending a large number of HTTP requests to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

  • Cisco IOS

    OS
    Cisco
    15.1\(3\)svr115.1\(3\)svr215.1\(3\)svr315.1\(3\)svs15.1\(3\)svs115.1\(3\)svt115.1\(3\)svt215.1\(3\)svt315.1\(3\)svu115.1\(3\)svu1015.1\(3\)svu215.1\(3\)svv115.2\(234k\)e15.2\(7\)e315.2\(7\)e3a+ 11 więcej

  • Cisco IOS XE

    OS
    Cisco
    3.11.3ae3.11.3e3.11.4e
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2023-20198CRITICAL10.0⚠ KEVPL ✓ten sam produkt

Cisco IOS XE Web UI — nieautoryzowane tworzenie konta z privilege 15

CVE-2018-0151CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Buffer overflow w QoS Cisco IOS/IOS XE — RCE i DoS przez UDP 18999

CVE-2018-0171CRITICAL9.8⚠ KEVPL ✓ten sam produkt

RCE i DoS w funkcji Smart Install systemu Cisco IOS przez przepełnienie bufora

CVE-2017-12240CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Buffer overflow w DHCP relay Cisco IOS — RCE bez uwierzytelnienia

CVE-2017-3881CRITICAL9.8⚠ KEVPL ✓ten sam produkt

RCE w Cisco IOS/IOS XE – podatność protokołu CMP przez Telnet