Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-20697

A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper resource management in the HTTP server code. An attacker could exploit this vulnerability by sending a large number of HTTP requests to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Published

2022-04-15T15:15:12.967

Last Modified

2024-11-21T06:43:21.053

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.6 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

8.0

Impact Score

6.9

Weaknesses
  • Type: Secondary
    CWE-691
  • Type: Primary
    CWE-772
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios 15.1\(3\)svr1 Yes
Operating System cisco ios 15.1\(3\)svr2 Yes
Operating System cisco ios 15.1\(3\)svr3 Yes
Operating System cisco ios 15.1\(3\)svs Yes
Operating System cisco ios 15.1\(3\)svs1 Yes
Operating System cisco ios 15.1\(3\)svt1 Yes
Operating System cisco ios 15.1\(3\)svt2 Yes
Operating System cisco ios 15.1\(3\)svt3 Yes
Operating System cisco ios 15.1\(3\)svu1 Yes
Operating System cisco ios 15.1\(3\)svu2 Yes
Operating System cisco ios 15.1\(3\)svu10 Yes
Operating System cisco ios 15.1\(3\)svv1 Yes
Operating System cisco ios 15.2\(7\)e3 Yes
Operating System cisco ios 15.2\(7\)e3a Yes
Operating System cisco ios 15.2\(7\)e3k Yes
Operating System cisco ios 15.2\(7\)e4 Yes
Operating System cisco ios 15.2\(8\)e Yes
Operating System cisco ios 15.2\(234k\)e Yes
Operating System cisco ios 15.3\(3\)jk100 Yes
Operating System cisco ios 15.3\(3\)jpj8 Yes
Operating System cisco ios 15.9\(3\)m2 Yes
Operating System cisco ios 15.9\(3\)m2a Yes
Operating System cisco ios 15.9\(3\)m3 Yes
Operating System cisco ios 15.9\(3\)m3a Yes
Operating System cisco ios 15.9\(3\)m3b Yes
Operating System cisco ios 15.9\(3\)m4 Yes
Operating System cisco ios_xe 3.11.3ae Yes
Operating System cisco ios_xe 3.11.3e Yes
Operating System cisco ios_xe 3.11.4e Yes
References