CVE-2022-20692

Description

A vulnerability in the NETCONF over SSH feature of Cisco IOS XE Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service condition (DoS) on an affected device. This vulnerability is due to insufficient resource management. An attacker could exploit this vulnerability by initiating a large number of NETCONF over SSH connections. A successful exploit could allow the attacker to exhaust resources, causing the device to reload and resulting in a DoS condition on an affected device.

Reserved 2021-11-02 | Published 2022-04-15 | Updated 2024-11-06 | Assigner cisco

Problem types

CWE-400

Product status

Any version
affected

References

tools.cisco.com/...rityAdvisory/cisco-sa-ncossh-dos-ZAkfOdq8 (20220413 Cisco IOS XE Software NETCONF Over SSH Denial of Service Vulnerability) vendor-advisory

cve.org (CVE-2022-20692)

nvd.nist.gov (CVE-2022-20692)

Download JSON