Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-20821

A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is running within the NOSi container. This vulnerability exists because the health check RPM opens TCP port 6379 by default upon activation. An attacker could exploit this vulnerability by connecting to the Redis instance on the open port. A successful exploit could allow the attacker to write to the Redis in-memory database, write arbitrary files to the container filesystem, and retrieve information about the Redis database. Given the configuration of the sandboxed container that the Redis instance runs in, a remote attacker would be unable to execute remote code or abuse the integrity of the Cisco IOS XR Software host system.

Published

2022-05-26T14:15:08.123

Last Modified

2025-02-24T15:24:27.177

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

4.9

Weaknesses
  • Type: Secondary
    CWE-200
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios_xr - Yes
Hardware cisco 8201 - No
Hardware cisco 8202 - No
Hardware cisco 8208 - No
Hardware cisco 8212 - No
Hardware cisco 8218 - No
Hardware cisco ncs-55a1-24h - No
Hardware cisco ncs-55a1-24q6h-s - No
Hardware cisco ncs-55a1-36h-s - No
Hardware cisco ncs-55a1-36h-se - No
Hardware cisco ncs-55a1-36h-se-s - No
Hardware cisco ncs-55a2-mod-hd-s - No
Hardware cisco ncs-55a2-mod-hx-s - No
Hardware cisco ncs-55a2-mod-s - No
Hardware cisco ncs-55a2-mod-se-h-s - No
Hardware cisco ncs-55a2-mod-se-s - No
Hardware cisco ncs_1001 - No
Hardware cisco ncs_1002 - No
Hardware cisco ncs_1004 - No
Hardware cisco ncs_5001 - No
Hardware cisco ncs_5002 - No
Hardware cisco ncs_5501-se - No
Hardware cisco ncs_5502-se - No
Hardware cisco ncs_5504 - No
Hardware cisco ncs_5508 - No
Hardware cisco ncs_5516 - No
Hardware cisco ncs_55a1 - No
Hardware cisco ncs_55a2 - No
References