CVE-2022-20678

The CVE-2022-20678 issue affects Cisco IOS XE Software’s AppNav-XE component. It arises from incorrect handling of certain TCP segments, enabling an unauthenticated, remote attacker to trigger a DoS by sending a high-rate stream of crafted TCP traffic through an interface with AppNav interception...

CVE-2022-20678 Cisco IOS XE Software AppNav-XE Denial of Service Vulnerability

A vulnerability in the AppNav-XE feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. This vulnerability is due to the incorrect handling of certain TCP segments. An attacker could...

CVE-2022-20679

CVE-2022-20679 involves a vulnerability in the IPSec decryption routine of Cisco IOS XE Software. It can allow an unauthenticated, remote attacker to cause an affected device to reload (DoS) due to buffer exhaustion while processing traffic on a configured IPsec tunnel. Exploitation requires send...

CVE-2022-20681

CVE-2022-20681 affects Cisco IOS XE on Catalyst 9000 Family Switches and Wireless Controllers. The root cause is insufficient validation of user privileges after certain CLI commands, allowing an authenticated, local low-privilege user to elevate to level 15 and execute arbitrary commands with hi...

CVE-2022-20682

CVE-2022-20682 affects Cisco IOS XE Wireless Controller Software for the Catalyst 9000 family. The vulnerability stems from inadequate input validation of CAPWAP packets carrying mDNS queries, allowing an unauthenticated, remote attacker to cause a DoS by crashing the device. Affected component: ...

CVE-2022-20682 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability

A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This...

CVE-2022-20682 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability

A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This...

CVE-2022-20683 Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability

A vulnerability in the Application Visibility and Control AVC-FNF feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to...

CVE-2022-20684

CVE-2022-20684 affects Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family. The issue is an input validation defect in SNMP trap generation for events related to wireless client connections, which can be triggered by an unauthenticated, adjacent attacker sending crafted 802.1X ...

CVE-2022-20692

Cisco IOS XE Software NETCONF Over SSH contains a denial-of-service vulnerability (CVE-2022-20692) due to insufficient resource management. A low-privileged, authenticated attacker can exhaust resources by initiating a large number of NETCONF over SSH connections, potentially causing device reloa...

CVE-2022-20692 Cisco IOS XE Software NETCONF Over SSH Denial of Service Vulnerability

A vulnerability in the NETCONF over SSH feature of Cisco IOS XE Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service condition DoS on an affected device. This vulnerability is due to insufficient resource management. An attacker could exploit this...

CVE-2022-20692 Cisco IOS XE Software NETCONF Over SSH Denial of Service Vulnerability

A vulnerability in the NETCONF over SSH feature of Cisco IOS XE Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service condition DoS on an affected device. This vulnerability is due to insufficient resource management. An attacker could exploit this...

CVE-2022-20693 Cisco IOS XE Software Web UI API Injection Vulnerability

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input...

CVE-2022-20693

Summary of CVE-2022-20693 (Cisco IOS XE Web UI API Injection) : A vulnerability in the Cisco IOS XE Software web UI API could allow an authenticated, remote attacker to inject commands into the underlying OS with root privileges due to insufficient input validation. Exploitation would involve sen...

CVE-2022-20693 Cisco IOS XE Software Web UI API Injection Vulnerability

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input...

CVE-2022-20694 Cisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service Vulnerability

A vulnerability in the implementation of the Resource Public Key Infrastructure RPKI feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol BGP process to crash, resulting in a denial of service DoS condition. This vulnerability is du...

CVE-2022-20694 Cisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service Vulnerability

A vulnerability in the implementation of the Resource Public Key Infrastructure RPKI feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol BGP process to crash, resulting in a denial of service DoS condition. This vulnerability is du...

CVE-2022-20694

Cisco IOS XE Software contains a Denial of Service vulnerability in the RPKI feature that can crash the BGP process via crafted RTR packets. An unauthenticated remote attacker could exploit this by sending RTR packets (directly or via MITM) after compromising the RPKI validator server or over the...

CVE-2022-20697

The CVE-2022-20697 issue affects Cisco IOS Software and Cisco IOS XE Software web services. The vulnerability stems from improper resource management in the HTTP server code, enabling an authenticated, remote attacker to trigger a DoS by sending a large volume of HTTP requests, which can cause th...

CVE-2022-20697 Cisco IOS and IOS XE Software Web Services Denial of Service Vulnerability

A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to improper resource management in the HTTP server code. An attacker could exploit this...