We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2022-20624

Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability



Assignercisco
Reserved2021-11-02
Published2022-02-23
Updated2024-11-06

Description

A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of incoming CFSoIP packets. An attacker could exploit this vulnerability by sending crafted CFSoIP packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.



HIGH: 8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Product status

Any version
affected

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cfsoip-dos-tpykyDr (20220223 Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability) vendor-advisory

cve.org CVE-2022-20624

nvd.nist.gov CVE-2022-20624

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2022-20624
Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.