Fiche vulnérabilité
CVE-2022-20824 : faille élevée cisco mds 9506 firmware (CVSS 8.8)
Description
A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation of specific values that are within a Cisco Discovery Protocol message. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges or cause the Cisco Discovery Protocol process to crash and restart multiple times, which would cause the affected device to reload, resulting in a DoS condition. Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).
En bref
- Sévérité
- Élevée (CVSS 8.8)
- Vecteur CVSS
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 25 août 2022
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- cisco mds 9506 firmware
- cisco mds 9513 firmware
- cisco mds 9706 firmware
- cisco mds 9710 firmware
- cisco mds 9718 firmware
- cisco nexus 1000v firmware
- cisco nexus 3016 firmware
- cisco nexus 3016q firmware
- cisco nexus 3048 firmware
- cisco nexus 3064 firmware
- cisco nexus 3064-32t firmware
- cisco nexus 3064-t firmware
- cisco nexus 3064-x firmware
- cisco nexus 3064t firmware
- cisco nexus 3064x firmware
- cisco nexus 3100 firmware
- cisco nexus 3100-v firmware
- cisco nexus 3100-z firmware
- cisco nexus 3100v firmware
- cisco nexus 31108pc-v firmware