Lucene search

K
cve[email protected]CVE-2022-20717
HistoryApr 15, 2022 - 3:15 p.m.

CVE-2022-20717

2022-04-1515:15:13
CWE-770
CWE-789
web.nvd.nist.gov
58
4
cisco
sd-wan
vedge routers
netconf
vulnerability
dos
cve-2022-20717
nvd

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cause an affected device to run out of memory, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient memory management when an affected device receives large amounts of traffic. An attacker could exploit this vulnerability by sending malicious traffic to an affected device. A successful exploit could allow the attacker to cause the device to crash, resulting in a DoS condition.

Affected configurations

NVD
Node
ciscosd-wan_vedge_routerRange20.6
OR
ciscosd-wan_vedge_routerMatch20.7
AND
cisco1100_integrated_services_routerMatch-
OR
citrixsd-wan_1000Match-
OR
citrixsd-wan_110Match-
OR
citrixsd-wan_1100Match-
OR
citrixsd-wan_2000Match-
OR
citrixsd-wan_210Match-
OR
citrixsd-wan_2100Match-
OR
citrixsd-wan_5100Match-

CNA Affected

[
  {
    "product": "Cisco SD-WAN vEdge router ",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Social References

More

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2022-20717