CVE-2022-20824

Summary: CVE-2022-20824 affects Cisco FXOS and Cisco NX-OS Software with Cisco Discovery Protocol enabled. The issue stems from improper input validation of values within a Cisco Discovery Protocol message, which can let an unauthenticated, adjacent attacker execute arbitrary code with root privi...

CVE-2022-20823

Cisco NX-OS Software OSPFv3 DoS vulnerability (CVE-2022-20823) arises from incomplete input validation of OSPFv3 LSAs. An unauthenticated remote attacker sending crafted OSPFv3 LSAs can crash and restart the OSPFv3 process, causing device reloads and DoS. The feature is disabled by default and ex...