CVE-2022-20933

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of client-supplied parameters while establishing an SSL VPN session. An attacker could exploit this vulnerability by crafting a malicious request and sending it to the affected device. A successful exploit could allow the attacker to cause the Cisco AnyConnect VPN server to crash and restart, resulting in the failure of the established SSL VPN connections and forcing remote users to initiate a new VPN connection and re-authenticate. A sustained attack could prevent new SSL VPN connections from being established. Note: When the attack traffic stops, the Cisco AnyConnect VPN server recovers gracefully without requiring manual intervention. Cisco Meraki has released software updates that address this vulnerability.

• Cisco Meraki Mx100

  HW
  Cisco
  wszystkie wersje

• Cisco Meraki Mx100 Firmware

  OS
  Cisco
  16.2.0 – 16.16.6 (bez)17.0.0 – 17.10.1 (bez)

• Cisco Meraki Mx105

  HW
  Cisco
  wszystkie wersje

• Cisco Meraki Mx105 Firmware

  OS
  Cisco
  16.2.0 – 16.16.6 (bez)17.0.0 – 17.10.1 (bez)

• Cisco Meraki Mx250

  HW
  Cisco
  wszystkie wersje

• Cisco Meraki Mx250 Firmware

  OS
  Cisco
  16.2.0 – 16.16.6 (bez)17.0.0 – 17.10.1 (bez)

• Cisco Meraki Mx400

  HW
  Cisco
  wszystkie wersje

• Cisco Meraki Mx400 Firmware

  OS
  Cisco
  17.0.0 – 17.10.1 (bez)16.2.0 – 16.16.6 (bez)

• Cisco Meraki Mx450

  HW
  Cisco
  wszystkie wersje

• Cisco Meraki Mx450 Firmware

  OS
  Cisco
  16.2.0 – 16.16.6 (bez)17.0.0 – 17.10.1 (bez)

• Cisco Meraki Mx600

  HW
  Cisco
  wszystkie wersje

• Cisco Meraki Mx600 Firmware

  OS
  Cisco
  17.0.0 – 17.10.1 (bez)16.2.0 – 16.16.6 (bez)

• Cisco Meraki Mx64

  HW
  Cisco
  wszystkie wersje

• Cisco Meraki Mx64 Firmware

  OS
  Cisco
  16.2.0 – 16.16.6 (bez)17.0.0 – 17.10.1 (bez)

• Cisco Meraki Mx64w

  HW
  Cisco
  wszystkie wersje

• Cisco Meraki Mx64w Firmware

  OS
  Cisco
  17.0.0 – 17.10.1 (bez)16.2.0 – 16.16.6 (bez)

• Cisco Meraki Mx65

  HW
  Cisco
  wszystkie wersje

• Cisco Meraki Mx65 Firmware

  OS
  Cisco
  16.2.0 – 16.16.6 (bez)17.0.0 – 17.10.1 (bez)

• Cisco Meraki Mx65w

  HW
  Cisco
  wszystkie wersje

• Cisco Meraki Mx65w Firmware

  OS
  Cisco
  17.0.0 – 17.10.1 (bez)16.2.0 – 16.16.6 (bez)

• Cisco Meraki Mx67

  HW
  Cisco
  wszystkie wersje

• Cisco Meraki Mx67cw

  HW
  Cisco
  wszystkie wersje

• Cisco Meraki Mx67cw Firmware

  OS
  Cisco
  16.2.0 – 16.16.6 (bez)17.0.0 – 17.10.1 (bez)

• Cisco Meraki Mx67 Firmware

  OS
  Cisco
  16.2.0 – 16.16.6 (bez)17.0.0 – 17.10.1 (bez)

• Cisco Meraki Mx67w

  HW
  Cisco
  wszystkie wersje

• Cisco Meraki Mx67w Firmware

  OS
  Cisco
  16.2.0 – 16.16.6 (bez)17.0.0 – 17.10.1 (bez)

• Cisco Meraki Mx68

  HW
  Cisco
  wszystkie wersje

• Cisco Meraki Mx68cw

  HW
  Cisco
  wszystkie wersje

• Cisco Meraki Mx68cw Firmware

  OS
  Cisco
  16.2.0 – 16.16.6 (bez)17.0.0 – 17.10.1 (bez)

• Cisco Meraki Mx68 Firmware

  OS
  Cisco
  17.0.0 – 17.10.1 (bez)16.2.0 – 16.16.6 (bez)