HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2022-20870

CVSS 8.6v3.1pub. 2022-10-10upd. 2024-11-21

A vulnerability in the egress MPLS packet processing function of Cisco IOS XE Software for Cisco Catalyst 3650, Catalyst 3850, and Catalyst 9000 Family Switches could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient input validation of IPv4 traffic. An attacker could exploit this vulnerability by sending a malformed packet out of an affected MPLS-enabled interface. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

  • Cisco Catalyst 3650

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 12x48fd E

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 12x48fd L

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 12x48fd S

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 12x48uq

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 12x48uq E

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 12x48uq L

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 12x48uq S

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 12x48ur

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 12x48ur E

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 12x48ur L

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 12x48ur S

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 12x48uz

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 12x48uz E

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 12x48uz L

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 12x48uz S

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 24pd

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 24pd E

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 24pd L

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 24pdm

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 24pdm E

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 24pdm L

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 24pdm S

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 24pd S

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 24ps E

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 24ps L

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 24ps S

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 24td E

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 24td L

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 3650 24td S

    HW
    Cisco
    wszystkie wersje
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2023-20198CRITICAL10.0⚠ KEVten sam produkt

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in...

CVE-2018-0151CRITICAL9.8⚠ KEVten sam produkt

A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software coul...

CVE-2017-3881CRITICAL9.8⚠ KEVten sam produkt

A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE S...

CVE-2025-20363CRITICAL9.0PL ✓ten sam produkt

RCE w web services Cisco ASA, FTD, IOS, IOS XE, IOS XR przez HTTP

CVE-2025-20188CRITICAL10.0PL ✓ten sam produkt

Cisco IOS XE WLC — nieuwierzytelniony upload plików i RCE przez hardcoded JWT