1. Home
  2. CVE Database
  3. CVE-2022-20623
HIGH · 8.6

CVE-2022-20623

A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to...

Vulnerability Description

A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause BFD traffic to be dropped on an affected device. This vulnerability is due to a logic error in the BFD rate limiter functionality. An attacker could exploit this vulnerability by sending a crafted stream of traffic through the device. A successful exploit could allow the attacker to cause BFD traffic to be dropped, resulting in BFD session flaps. BFD session flaps can cause route instability and dropped traffic, resulting in a denial of service (DoS) condition. This vulnerability applies to both IPv4 and IPv6 traffic.

CVSS Score

8.6

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
CiscoNx-Os>= 7.0\(3\)i6\(2\), <= 7.0\(3\)i7\(3\)
CiscoN9K-C92160Yc-X-
CiscoN9K-C92300Yc-
CiscoN9K-C92304Qc-
CiscoN9K-C9232C-
CiscoN9K-C92348Gc-X-
CiscoN9K-C9236C-
CiscoN9K-C9272Q-
CiscoN9K-C93108Tc-Ex-
CiscoN9K-C93108Tc-Fx-
CiscoN9K-C9316D-Gx-
CiscoN9K-C93180Lc-Ex-
CiscoN9K-C93180Yc-Ex-
CiscoN9K-C93180Yc-Fx-
CiscoN9K-C93180Yc2-Fx-
CiscoN9K-C93216Tc-Fx2-
CiscoN9K-C93240Yc-Fx2-
CiscoN9K-C9332C-
CiscoN9K-C93360Yc-Fx2-
CiscoN9K-C9336C-Fx2-

Related Weaknesses (CWE)

CWE-399

References

FAQ

What is CVE-2022-20623?

CVE-2022-20623 is a vulnerability with a CVSS score of 8.6 (HIGH). A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to...

How severe is CVE-2022-20623?

CVE-2022-20623 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-20623?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Nx-Os, Cisco N9K-C92160Yc-X, Cisco N9K-C92300Yc, Cisco N9K-C92304Qc, Cisco N9K-C9232C.