Lucene search

[email protected]CVE-2022-20920

HistoryOct 10, 2022 - 9:15 p.m.

CVE-2022-20920

2022-10-1021:15:00

CWE-755

[email protected]

web.nvd.nist.gov

cisco

ios

ssh

vulnerability

cve-2022-20920

nvd

reload

remote attacker

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

44.1%

JSON

A vulnerability in the SSH implementation of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to improper handling of resources during an exceptional situation. An attacker could exploit this vulnerability by continuously connecting to an affected device and sending specific SSH requests. A successful exploit could allow the attacker to cause the affected device to reload.

CPENameOperatorVersion
cisco:ioscisco ioseq15.2\(4\)ea
cisco:ioscisco ioseq15.4\(2\)s2
cisco:ioscisco ioseq15.3\(3\)jnb3
cisco:ioscisco ioseq3.5.3e
cisco:ioscisco ioseq15.0\(2\)ex4
cisco:ioscisco ioseq15.1\(3\)s4
cisco:ioscisco ioseq15.3\(2\)s1
cisco:ioscisco ioseq15.1\(1\)s
cisco:ioscisco ioseq15.1\(2\)sy10
cisco:ioscisco ioseq12.4\(22\)mda6

CPE	Name	Operator	Version
cisco:ios	cisco ios	eq	15.2\(4\)ea
cisco:ios	cisco ios	eq	15.4\(2\)s2
cisco:ios	cisco ios	eq	15.3\(3\)jnb3
cisco:ios	cisco ios	eq	3.5.3e
cisco:ios	cisco ios	eq	15.0\(2\)ex4
cisco:ios	cisco ios	eq	15.1\(3\)s4
cisco:ios	cisco ios	eq	15.3\(2\)s1
cisco:ios	cisco ios	eq	15.1\(1\)s
cisco:ios	cisco ios	eq	15.1\(2\)sy10
cisco:ios	cisco ios	eq	12.4\(22\)mda6

Rows per page:

1-10 of 14461

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssh-excpt-dos-FzOBQTnk

Social References

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

44.1%

JSON

Related for CVE-2022-20920

prion1 nessus2 cvelist1 cnvd1 cisco1