HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2022-20870

CVSS 8.6v3.1pub. 2022-10-10upd. 2024-11-21

A vulnerability in the egress MPLS packet processing function of Cisco IOS XE Software for Cisco Catalyst 3650, Catalyst 3850, and Catalyst 9000 Family Switches could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient input validation of IPv4 traffic. An attacker could exploit this vulnerability by sending a malformed packet out of an affected MPLS-enabled interface. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

  • Cisco Catalyst 3650

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 12x48fd E

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 12x48fd L

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 12x48fd S

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 12x48uq

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 12x48uq E

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 12x48uq L

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 12x48uq S

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 12x48ur

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 12x48ur E

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 12x48ur L

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 12x48ur S

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 12x48uz

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 12x48uz E

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 12x48uz L

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 12x48uz S

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 24pd

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 24pd E

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 24pd L

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 24pdm

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 24pdm E

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 24pdm L

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 24pdm S

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 24pd S

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 24ps E

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 24ps L

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 24ps S

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 24td E

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 24td L

    HW
    Cisco
    all versions

  • Cisco Catalyst 3650 24td S

    HW
    Cisco
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2023-20198CRITICAL10.0⚠ KEVPL ✓same product

Cisco IOS XE Web UI — nieautoryzowane tworzenie konta z privilege 15

CVE-2018-0151CRITICAL9.8⚠ KEVPL ✓same product

Buffer overflow w QoS Cisco IOS/IOS XE — RCE i DoS przez UDP 18999

CVE-2017-3881CRITICAL9.8⚠ KEVPL ✓same product

RCE w Cisco IOS/IOS XE – podatność protokołu CMP przez Telnet

CVE-2026-20267CRITICAL9.0PL ✓same product

Nieprawidłowa kontrola dostępu w Cisco IOS XE Software (CVE-2026-20267)

CVE-2026-20272CRITICAL9.8PL ✓same product

Cisco IOS XE — improper neutralization of special elements (CWE-74)