CVE-2022-20625 : A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software a

A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to restart, resulting in a denial of service (DoS) condition. This vulnerability is due to improper handling of Cisco Discovery Protocol messages that are processed by the Cisco Discovery Protocol service. An attacker could exploit this vulnerability by sending a series of malicious Cisco Discovery Protocol messages to an affected device. A successful exploit could allow the attacker to cause the Cisco Discovery Protocol service to fail and restart. In rare conditions, repeated failures of the process could occur, which could cause the entire device to restart.

Published 2022-02-23 18:15:19

Updated 2023-07-24 13:49:56

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2022-20625

Cisco » Nx-os » Version: 8.2(7.34)
cpe:2.3:o:cisco:nx-os:8.2\(7.34\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Mds 9132t » Version: N/A
When used together with: Cisco » Mds 9148s » Version: N/A
When used together with: Cisco » Mds 9148t » Version: N/A
When used together with: Cisco » Mds 9222i » Version: N/A
When used together with: Cisco » Mds 9250i » Version: N/A
When used together with: Cisco » Mds 9396s » Version: N/A
When used together with: Cisco » Mds 9396t » Version: N/A
When used together with: Cisco » Mds 9506 » Version: N/A
When used together with: Cisco » Mds 9513 » Version: N/A
When used together with: Cisco » Mds 9706 » Version: N/A
When used together with: Cisco » Mds 9710 » Version: N/A
When used together with: Cisco » Mds 9718 » Version: N/A
When used together with: Cisco » N77-f312ck-26 » Version: N/A
When used together with: Cisco » N77-f324fq-25 » Version: N/A
When used together with: Cisco » N77-f348xp-23 » Version: N/A
When used together with: Cisco » N77-f430cq-36 » Version: N/A
When used together with: Cisco » N77-m312cq-26l » Version: N/A
When used together with: Cisco » N77-m324fq-25l » Version: N/A
When used together with: Cisco » N77-m348xp-23l » Version: N/A
When used together with: Cisco » N7k-f248xp-25e » Version: N/A
When used together with: Cisco » N7k-f306ck-25 » Version: N/A
When used together with: Cisco » N7k-f312fq-25 » Version: N/A
When used together with: Cisco » N7k-m202cf-22l » Version: N/A
When used together with: Cisco » N7k-m206fq-23l » Version: N/A
When used together with: Cisco » N7k-m224xp-23l » Version: N/A
When used together with: Cisco » N7k-m324fq-25l » Version: N/A
When used together with: Cisco » N7k-m348xp-25l » Version: N/A
When used together with: Cisco » Nexus 7000 10-slot » Version: N/A
When used together with: Cisco » Nexus 7000 18-slot » Version: N/A
When used together with: Cisco » Nexus 7000 4-slot » Version: N/A
When used together with: Cisco » Nexus 7000 9-slot » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 1 » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 2 » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 2e » Version: N/A
When used together with: Cisco » Nexus 7700 10-slot » Version: N/A
When used together with: Cisco » Nexus 7700 18-slot » Version: N/A
When used together with: Cisco » Nexus 7700 2-slot » Version: N/A
When used together with: Cisco » Nexus 7700 6-slot » Version: N/A
When used together with: Cisco » Nexus 7700 Supervisor 2e » Version: N/A
When used together with: Cisco » Nexus 7700 Supervisor 3e » Version: N/A
Cisco » Nx-os » Version: 5.2(1)sv5(1.3b)
cpe:2.3:o:cisco:nx-os:5.2\(1\)sv5\(1.3b\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 1000v » Version: N/A For Microsoft Hyper-v
When used together with: Cisco » Nexus 1000v » Version: N/A For Vmware Vsphere
When used together with: Cisco » Nexus 1000ve » Version: N/A For Vsphere
Cisco » Nx-os » Version: 9.3(8.15)
cpe:2.3:o:cisco:nx-os:9.3\(8.15\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » N9k-c9316d-gx » Version: N/A
When used together with: Cisco » N9k-c9332d-gx2b » Version: N/A
When used together with: Cisco » N9k-c9348d-gx2a » Version: N/A
When used together with: Cisco » N9k-c93600cd-gx » Version: N/A
When used together with: Cisco » N9k-c9364d-gx2a » Version: N/A
When used together with: Cisco » Nexus 1000v » Version: N/A For Vmware Vsphere
When used together with: Cisco » Nexus 3048 » Version: N/A
When used together with: Cisco » Nexus 31108pc-v » Version: N/A
When used together with: Cisco » Nexus 31108tc-v » Version: N/A
When used together with: Cisco » Nexus 31128pq » Version: N/A
When used together with: Cisco » Nexus 3132c-z » Version: N/A
When used together with: Cisco » Nexus 3132q-v » Version: N/A
When used together with: Cisco » Nexus 3132q-x » Version: N/A
When used together with: Cisco » Nexus 3132q-xl » Version: N/A
When used together with: Cisco » Nexus 3164q » Version: N/A
When used together with: Cisco » Nexus 3172pq » Version: N/A
When used together with: Cisco » Nexus 3172pq-xl » Version: N/A
When used together with: Cisco » Nexus 3172tq-xl » Version: N/A
When used together with: Cisco » Nexus 3232c » Version: N/A
When used together with: Cisco » Nexus 3264c-e » Version: N/A
When used together with: Cisco » Nexus 3264q » Version: N/A
When used together with: Cisco » Nexus 3408-s » Version: N/A
When used together with: Cisco » Nexus 34180yc » Version: N/A
When used together with: Cisco » Nexus 3432d-s » Version: N/A
When used together with: Cisco » Nexus 3464c » Version: N/A
When used together with: Cisco » Nexus 3524-x » Version: N/A
When used together with: Cisco » Nexus 3524-xl » Version: N/A
When used together with: Cisco » Nexus 3548-x » Version: N/A
When used together with: Cisco » Nexus 3548-xl » Version: N/A
When used together with: Cisco » Nexus 36180yc-r » Version: N/A
When used together with: Cisco » Nexus 3636c-r » Version: N/A
When used together with: Cisco » Nexus 92160yc-x » Version: N/A
When used together with: Cisco » Nexus 92300yc » Version: N/A
When used together with: Cisco » Nexus 92304qc » Version: N/A
When used together with: Cisco » Nexus 92348gc-x » Version: N/A
When used together with: Cisco » Nexus 9236c » Version: N/A
When used together with: Cisco » Nexus 9272q » Version: N/A
When used together with: Cisco » Nexus 93108tc-ex » Version: N/A
When used together with: Cisco » Nexus 93108tc-fx » Version: N/A
When used together with: Cisco » Nexus 93108tc-fx3p » Version: N/A
When used together with: Cisco » Nexus 93120tx » Version: N/A
When used together with: Cisco » Nexus 93216tc-fx2 » Version: N/A
When used together with: Cisco » Nexus 9332c » Version: N/A
When used together with: Cisco » Nexus 9336c-fx2 » Version: N/A
When used together with: Cisco » Nexus 9336c-fx2-e » Version: N/A
When used together with: Cisco » Nexus 9348gc-fxp » Version: N/A
When used together with: Cisco » Nexus 9364c » Version: N/A
When used together with: Cisco » Nexus 9364c-gx » Version: N/A
When used together with: Cisco » Nexus 9504 » Version: N/A
When used together with: Cisco » Nexus 9508 » Version: N/A
When used together with: Cisco » Nexus 9516 » Version: N/A
Cisco » Nx-os » Version: 4.0(1a)a
cpe:2.3:o:cisco:nx-os:4.0\(1a\)a:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Ucs 64108 » Version: N/A
When used together with: Cisco » Ucs 6454 » Version: N/A
Cisco » Nx-os » Version: 4.1(3f)c
cpe:2.3:o:cisco:nx-os:4.1\(3f\)c:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Ucs 6248up » Version: N/A
When used together with: Cisco » Ucs 6296up » Version: N/A
When used together with: Cisco » Ucs 6324 » Version: N/A
When used together with: Cisco » Ucs 6332 » Version: N/A
When used together with: Cisco » Ucs 6332-16up » Version: N/A
Cisco » Firepower Extensible Operating System
Versions from including (>=) 2.4 and before (<) 2.9.1.158
cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Firepower 4110 » Version: N/A
When used together with: Cisco » Firepower 4112 » Version: N/A
When used together with: Cisco » Firepower 4115 » Version: N/A
When used together with: Cisco » Firepower 4120 » Version: N/A
When used together with: Cisco » Firepower 4125 » Version: N/A
When used together with: Cisco » Firepower 4140 » Version: N/A
When used together with: Cisco » Firepower 4145 » Version: N/A
When used together with: Cisco » Firepower 4150 » Version: N/A
When used together with: Cisco » Firepower 9300 » Version: N/A
Cisco » Firepower Extensible Operating System
Versions from including (>=) 2.10 and before (<) 2.10.1.179
cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Firepower 4110 » Version: N/A
When used together with: Cisco » Firepower 4112 » Version: N/A
When used together with: Cisco » Firepower 4115 » Version: N/A
When used together with: Cisco » Firepower 4120 » Version: N/A
When used together with: Cisco » Firepower 4125 » Version: N/A
When used together with: Cisco » Firepower 4140 » Version: N/A
When used together with: Cisco » Firepower 4145 » Version: N/A
When used together with: Cisco » Firepower 4150 » Version: N/A
When used together with: Cisco » Firepower 9300 » Version: N/A
Cisco » Firepower Extensible Operating System
Versions before (<) 2.3.1.219
cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Firepower 4110 » Version: N/A
When used together with: Cisco » Firepower 4112 » Version: N/A
When used together with: Cisco » Firepower 4115 » Version: N/A
When used together with: Cisco » Firepower 4120 » Version: N/A
When used together with: Cisco » Firepower 4125 » Version: N/A
When used together with: Cisco » Firepower 4140 » Version: N/A
When used together with: Cisco » Firepower 4145 » Version: N/A
When used together with: Cisco » Firepower 4150 » Version: N/A
When used together with: Cisco » Firepower 9300 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-20625

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 26 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-20625

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.1	MEDIUM	AV:A/AC:L/Au:N/C:N/I:N/A:C	6.5	6.9	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
4.3	MEDIUM	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	2.8	1.4	Cisco Systems, Inc.
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: Low
4.3	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	2.8	1.4	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: Low

CWE ids for CVE-2022-20625

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)
CWE-399

Assigned by: ykramarz@cisco.com (Secondary)

References for CVE-2022-20625

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cdp-dos-G8DPLWYG

Cisco FXOS and NX-OS Software Cisco Discovery Protocol Service Denial of Service Vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2022-20625

Products affected by CVE-2022-20625

Exploit prediction scoring system (EPSS) score for CVE-2022-20625

CVSS scores for CVE-2022-20625

CWE ids for CVE-2022-20625

References for CVE-2022-20625