CVE Feed

    Dashboard / CVE / CVE-2022-20837

    CVE-2022-20837

    A vulnerability in the DNS application layer gateway (ALG) functionality that is used by Network Address Translation (NAT) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a logic error that occurs when an affected device inspects certain TCP DNS packets. An attacker could exploit this vulnerability by sending crafted DNS packets through the affected device that is performing NAT for DNS packets. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on the affected device. Note: This vulnerability can be exploited only by sending IPv4 TCP packets through an affected device. This vulnerability cannot be exploited by sending IPv6 traffic.

    Published:Oct 10, 2022
    Last Modified:Nov 21, 2024
    EPS:Oct 10, 2022
    EPSS Score:0.00374
    CVSS Score:8.6

    Affected Products

    Vendor
    Cisco
    Product
    Asr 1000-esp100-x
    Vendor
    Cisco
    Product
    Asr 1000-esp200-x
    Vendor
    Cisco
    Product
    Catalyst 8500
    Vendor
    Cisco
    Product
    Catalyst 8500-4qc
    Vendor
    Cisco
    Product
    Ios Xe

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-20065 (CVSS 7.8) — A vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authent…
    CVE-2023-20081 (CVSS 6.8) — A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, C…
    CVE-2023-20066 (CVSS 6.5) — A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perfor…
    CVE-2018-0154 (CVSS 7.5) — A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco I…
    CVE-2018-0180 (CVSS 5.9) — Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an …
    CVE-2018-0179 (CVSS 5.9) — Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an …
    CVE-2017-12319 (CVSS 5.9) — A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco…
    CVE-2017-12232 (CVSS 6.5) — A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2)…
    CVE-2017-12240 (CVSS 9.8) — The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability tha…
    CVE-2017-12231 (CVSS 7.5) — A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 thr…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High