CVE-2022-20821

🗓️ 26 May 2022 14:00:31Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 1098 Views

A vulnerability in Cisco IOS XR Software allows unauthenticated access to Redis instance in NOSi container

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2022-20821	20 May 202200:00	–	attackerkb
BDU FSTEC	The vulnerability in the packet management subsystem of the Remote Package Manager (RPM) of the Cisco IOS XR network operating system for Cisco 8000 series routers allows a attacker to access the Redis database running on the NOSi container.	23 May 202200:00	–	bdu_fstec
Circl	CVE-2022-20821	22 May 202210:35	–	circl
CISA KEV Catalog	Cisco IOS XR Open Port Vulnerability	23 May 202200:00	–	cisa_kev
Cisco	Cisco IOS XR Software Health Check Open Port Vulnerability	20 May 202216:00	–	cisco
Tenable Nessus	Cisco IOS XR Software Health Check Open Port (cisco-sa-iosxr-redis-ABJyE5xK)	26 May 202200:00	–	nessus
CNNVD	Cisco IOS XR 信息泄露漏洞	20 May 202200:00	–	cnnvd
Cvelist	CVE-2022-20821 Cisco IOS XR Software Health Check Open Port Vulnerability	26 May 202214:00	–	cvelist
NCSC	Vulnerability fixed in Cisco IOS XR	23 May 202200:00	–	ncsc
NVD	CVE-2022-20821	26 May 202214:15	–	nvd

NVD

Node

AND

cisco ios_xrMatch-

cisco 8201Match-

cisco 8202Match-

cisco 8208Match-

cisco 8212Match-

cisco 8218Match-

cisco ncs-55a1-24hMatch-

cisco ncs-55a1-24q6h-sMatch-

cisco ncs-55a1-36h-sMatch-

cisco ncs-55a1-36h-seMatch-

cisco ncs-55a1-36h-se-sMatch-

cisco ncs-55a2-mod-hd-sMatch-

cisco ncs-55a2-mod-hx-sMatch-

cisco ncs-55a2-mod-sMatch-

cisco ncs-55a2-mod-se-h-sMatch-

cisco ncs-55a2-mod-se-sMatch-

cisco ncs_1001Match-

cisco ncs_1002Match-

cisco ncs_1004Match-

cisco ncs_5001Match-

cisco ncs_5002Match-

cisco ncs_5501-seMatch-

cisco ncs_5502-seMatch-

cisco ncs_5504Match-

cisco ncs_5508Match-

cisco ncs_5516Match-

cisco ncs_55a1Match-

cisco ncs_55a2Match-

[
  {
    "product": "Cisco IOS XR Software",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-redis-ABJyE5xK
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog