CVE-2022-20919

Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability

View on CVE.org
Published Sep 30, 2022 CVSS 3.1 · 8.6 High EPSS 1.2% KEV · Not listed
Description
A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are sent to Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient input validation during processing of CIP packets. An attacker could exploit this vulnerability by sending a malformed CIP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to unexpectedly reload, resulting in a DoS condition.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-26169 A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are sent to Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient input validation during processing of CIP packets. An attacker could exploit this vulnerability by sending a malformed CIP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to unexpectedly reload, resulting in a DoS condition.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Cisco 1000 Integrated Services Router 1100-4g Integrated Services Router 1100-4p Integrated Services Router 1100-6g Integrated Services Router 1100-8p Integrated Services Router 1100 Integrated Services Router 1101-4p Integrated Services Router 1101 Integrated Services Router 1109-2p Integrated Services Router 1109-4p Integrated Services Router 1109 Integrated Services Router 1111x-8p Integrated Services Router 1111x Integrated Services Router 1120 Integrated Services Router 1131 Integrated Services Router 1160 Integrated Services Router 4221 Integrated Services Router 4321 Integrated Services Router 4331 Integrated Services Router 4351 Integrated Services Router 4431 Integrated Services Router 4451-x Integrated Services Router 4451 Integrated Services Router 4461 Integrated Services Router Asr-920-10sz-pd Asr-920-12cz-a Asr-920-12cz-d Asr-920-12sz-a Asr-920-12sz-d Asr-920-12sz-im Asr-920-12sz-im-cc Asr-920-20sz-m Asr-920-24sz-im Asr-920-24sz-m Asr-920-24tz-im Asr-920-24tz-m Asr-920-4sz-a Asr-920-4sz-d Asr-9901-rp Asr1000-2t\+20x1ge Asr1000-6tge Asr1000-esp200 Asr1000-mip100 Asr1000-rp3 Asr1001-hx Asr1001-hx-rf Asr1001-x Asr1001-x-rf Asr1001-x-ws Asr1002-hx Asr1002-hx-rf Asr1002-hx-ws Asr1002-x Asr1002-x-rf Asr1002-x-ws Asr 1000-esp100 Asr 1000-x Asr 1001 Asr 1001-hx Asr 1001-hx R Asr 1001-x Asr 1001-x R Asr 1002 Asr 1002-hx Asr 1002-hx R Asr 1002-x Asr 1002-x R Asr 1002 Fixed Router Asr 1004 Asr 1006 Asr 1006-x Asr 1009-x Asr 1013 Asr 1023 Asr 1023 Router Asr 5000 Asr 5500 Asr 5700 Asr 900 Asr 9000 Asr 9000 Rsp440 Router Asr 9000v Asr 9001 Asr 9006 Asr 900 Asr 900 Route Switch Processor 2 \(rsp2\) Asr 900 Route Switch Processor 3 \(rsp3\) Asr 901-12c-f-d Asr 901-12c-ft-d Asr 901-4c-f-d Asr 901-4c-ft-d Asr 901-6cz-f-a Asr 901-6cz-f-d Asr 901-6cz-fs-a Asr 901-6cz-fs-d Asr 901-6cz-ft-a Asr 901-6cz-ft-d Asr 9010 Asr 901s-2sg-f-ah Asr 901s-2sg-f-d Asr 901s-3sg-f-ah Asr 901s-3sg-f-d Asr 901s-4sg-f-d Asr 902 Asr 902u Asr 903 Asr 907 Asr 914 Asr 920-10sz-pd Asr 920-10sz-pd R Asr 920-10sz-pd Router Asr 920-12cz-a Asr 920-12cz-a R Asr 920-12cz-a Router Asr 920-12cz-d Asr 920-12cz-d R Asr 920-12cz-d Router Asr 920-12sz-im Asr 920-12sz-im R Asr 920-12sz-im Router Asr 920-24sz-im Asr 920-24sz-im R Asr 920-24sz-im Router Asr 920-24sz-m Asr 920-24sz-m R Asr 920-24sz-m Router Asr 920-24tz-m Asr 920-24tz-m R Asr 920-24tz-m Router Asr 920-4sz-a Asr 920-4sz-a R Asr 920-4sz-a Router Asr 920-4sz-d Asr 920-4sz-d R Asr 920-4sz-d Router Asr 920u-12sz-im Asr 9901 Asr 9903 Asr 9904 Asr 9906 Asr 9910 Asr 9912 Asr 9920 Asr 9922 Catalyst 3850 Catalyst 3850-12s-e Catalyst 3850-12s-s Catalyst 3850-12x48u Catalyst 3850-12xs-e Catalyst 3850-12xs-s Catalyst 3850-16xs-e Catalyst 3850-16xs-s Catalyst 3850-24p-e Catalyst 3850-24p-l Catalyst 3850-24p-s Catalyst 3850-24pw-s Catalyst 3850-24s-e Catalyst 3850-24s-s Catalyst 3850-24t-e Catalyst 3850-24t-l Catalyst 3850-24t-s Catalyst 3850-24u Catalyst 3850-24u-e Catalyst 3850-24u-l Catalyst 3850-24u-s Catalyst 3850-24xs Catalyst 3850-24xs-e Catalyst 3850-24xs-s Catalyst 3850-24xu Catalyst 3850-24xu-e Catalyst 3850-24xu-l Catalyst 3850-24xu-s Catalyst 3850-32xs-e Catalyst 3850-32xs-s Catalyst 3850-48f-e Catalyst 3850-48f-l Catalyst 3850-48f-s Catalyst 3850-48p-e Catalyst 3850-48p-l Catalyst 3850-48p-s Catalyst 3850-48pw-s Catalyst 3850-48t-e Catalyst 3850-48t-l Catalyst 3850-48t-s Catalyst 3850-48u Catalyst 3850-48u-e Catalyst 3850-48u-l Catalyst 3850-48u-s Catalyst 3850-48xs Catalyst 3850-48xs-e Catalyst 3850-48xs-f-e Catalyst 3850-48xs-f-s Catalyst 3850-48xs-s Catalyst 3850-nm-2-40g Catalyst 3850-nm-8-10g Catalyst 8200 Catalyst 8300 Catalyst 8300-1n1s-4t2x Catalyst 8300-1n1s-6t Catalyst 8300-2n2s-4t2x Catalyst 8300-2n2s-6t Catalyst 8500 Catalyst 8500-4qc Catalyst 8500l Catalyst 8510csr Catalyst 8510msr Catalyst 8540csr Catalyst 8540msr Catalyst 9100 Catalyst 9105 Catalyst 9105axi Catalyst 9105axw Catalyst 9115 Catalyst 9115 Ap Catalyst 9115axe Catalyst 9115axi Catalyst 9117 Catalyst 9117 Ap Catalyst 9117axi Catalyst 9120 Catalyst 9120 Ap Catalyst 9120axe Catalyst 9120axi Catalyst 9120axp Catalyst 9124 Catalyst 9124axd Catalyst 9124axi Catalyst 9130 Catalyst 9130 Ap Catalyst 9130axe Catalyst 9130axi Catalyst 9200 Catalyst 9200cx Catalyst 9200l Catalyst 9300 Catalyst 9300-24p-a Catalyst 9300-24p-e Catalyst 9300-24s-a Catalyst 9300-24s-e Catalyst 9300-24t-a Catalyst 9300-24t-e Catalyst 9300-24u-a Catalyst 9300-24u-e Catalyst 9300-24ux-a Catalyst 9300-24ux-e Catalyst 9300-48p-a Catalyst 9300-48p-e Catalyst 9300-48s-a Catalyst 9300-48s-e Catalyst 9300-48t-a Catalyst 9300-48t-e Catalyst 9300-48u-a Catalyst 9300-48u-e Catalyst 9300-48un-a Catalyst 9300-48un-e Catalyst 9300-48uxm-a Catalyst 9300-48uxm-e Catalyst 9300l Catalyst 9300l-24p-4g-a Catalyst 9300l-24p-4g-e Catalyst 9300l-24p-4x-a Catalyst 9300l-24p-4x-e Catalyst 9300l-24t-4g-a Catalyst 9300l-24t-4g-e Catalyst 9300l-24t-4x-a Catalyst 9300l-24t-4x-e Catalyst 9300l-48p-4g-a Catalyst 9300l-48p-4g-e Catalyst 9300l-48p-4x-a Catalyst 9300l-48p-4x-e Catalyst 9300l-48t-4g-a Catalyst 9300l-48t-4g-e Catalyst 9300l-48t-4x-a Catalyst 9300l-48t-4x-e Catalyst 9300l Stack Catalyst 9300lm Catalyst 9300x Catalyst 9400 Catalyst 9400 Supervisor Engine-1 Catalyst 9407r Catalyst 9410r Catalyst 9500 Catalyst 9500h Catalyst 9600 Catalyst 9600 Supervisor Engine-1 Catalyst 9600x Catalyst 9800 Catalyst 9800-40 Catalyst 9800-40 Wireless Controller Catalyst 9800-80 Catalyst 9800-80 Wireless Controller Catalyst 9800-cl Catalyst 9800-l Catalyst 9800-l-c Catalyst 9800-l-f Catalyst 9800 Embedded Wireless Controller Catalyst Ie3200 Catalyst Ie3200 Rugged Switch Catalyst Ie3300 Catalyst Ie3300 Rugged Switch Catalyst Ie3400 Catalyst Ie3400 Heavy Duty Switch Catalyst Ie3400 Rugged Switch Catalyst Ie9300 Ios Xe
Weaknesses

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Nov 1, 2024, 6:50 PM
Reserved
Nov 2, 2021, 12:00 AM

View source JSON

Updated
Aug 3, 2024, 2:31 AM

JSON

Status
Modified
Published
Sep 30, 2022, 7:15 PM
Modified
Jun 17, 2026, 4:25 AM

View source JSON

No data.

No data.