Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-20623

A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause BFD traffic to be dropped on an affected device. This vulnerability is due to a logic error in the BFD rate limiter functionality. An attacker could exploit this vulnerability by sending a crafted stream of traffic through the device. A successful exploit could allow the attacker to cause BFD traffic to be dropped, resulting in BFD session flaps. BFD session flaps can cause route instability and dropped traffic, resulting in a denial of service (DoS) condition. This vulnerability applies to both IPv4 and IPv6 traffic.

Published

2022-02-23T18:15:18.507

Last Modified

2024-11-21T06:43:10.913

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.6 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

6.9

Weaknesses
  • Type: Secondary
    CWE-399
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco nx-os ≤ 7.0\(3\)i7\(3\) Yes
Hardware cisco n9k-c92160yc-x - No
Hardware cisco n9k-c92300yc - No
Hardware cisco n9k-c92304qc - No
Hardware cisco n9k-c9232c - No
Hardware cisco n9k-c92348gc-x - No
Hardware cisco n9k-c9236c - No
Hardware cisco n9k-c9272q - No
Hardware cisco n9k-c93108tc-ex - No
Hardware cisco n9k-c93108tc-fx - No
Hardware cisco n9k-c9316d-gx - No
Hardware cisco n9k-c93180lc-ex - No
Hardware cisco n9k-c93180yc-ex - No
Hardware cisco n9k-c93180yc-fx - No
Hardware cisco n9k-c93180yc2-fx - No
Hardware cisco n9k-c93216tc-fx2 - No
Hardware cisco n9k-c93240yc-fx2 - No
Hardware cisco n9k-c9332c - No
Hardware cisco n9k-c93360yc-fx2 - No
Hardware cisco n9k-c9336c-fx2 - No
Hardware cisco n9k-c9348gc-fxp - No
Hardware cisco n9k-c93600cd-gx - No
Hardware cisco n9k-c9364c - No
Hardware cisco n9k-c9364c-gx - No
Operating System cisco nx-os ≤ 9.3\(8\) Yes
Operating System cisco nx-os ≤ 10.2\(1\) Yes
Hardware cisco n9k-x97160yc-ex - No
Hardware cisco n9k-x97284yc-fx - No
Hardware cisco n9k-x9732c-ex - No
Hardware cisco n9k-x9732c-fx - No
Hardware cisco n9k-x9736c-ex - No
Hardware cisco n9k-x9736c-fx - No
Hardware cisco n9k-x9788tc-fx - No
References