Vulnerability-Lookup

BDU:2022-03923 (CVE-2022-20683)

Vulnerability from fstec – Published: 2022-06-29 – Updated: 2022-06-29 – View on bdu.fstec.ru Fixed

Title

Summary

Уязвимость функции Application Visibility and Control (AVC-FNF) операционной системы Cisco IOS XE контроллеров беспроводной сети Cisco Catalyst серии 9800 и 9800-CL for Cloud связана с нарушением начальной границы буфера. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании путем отправки специально созданных пакетов

Severity

7.8 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:N/I:N/A:C

8.6 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-119 - Выход операции за границы буфера в памяти
CWE-124 - Нарушение начальной границы

Aliases

CVE-2022-20683, SB2022041411

References

3 references

URL
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-…
https://www.cybersecurity-help.cz/vdb/SB2022041411
https://vuldb.com/?id.197443

Impacted products

1 product from 2 vendors

Vendors

Cisco Systems, Inc.

Products

Cisco IOS XE

Versions

от 16.9.0 до 16.9.5 (Cisco IOS XE), от 17.2 до 17.2.2 (Cisco IOS XE), от 17.4 до 17.4.1 (Cisco IOS XE), от 16.7 до 16.7.2 (Cisco IOS XE), от 16.8 до 16.8.1s (Cisco IOS XE), от 16.8 до 16.8.2 (Cisco IOS XE), от 16.9 до 16.9.1 (Cisco IOS XE), от 16.9 до 16.9.1b (Cisco IOS XE), от 16.9 до 16.9.1d (Cisco IOS XE), от 16.9 до 16.9.2s (Cisco IOS XE), от 16.9 до 16.9.3s (Cisco IOS XE), от 16.9 до 16.9.7 (Cisco IOS XE), от 16.10 до 16.10.1a (Cisco IOS XE), от 16.10 до 16.10.1c (Cisco IOS XE), от 16.10 до 16.10.3 (Cisco IOS XE), от 16.11 до 16.11.1b (Cisco IOS XE), от 16.11 до 16.11.1c (Cisco IOS XE), от 16.12 до 16.12.1a (Cisco IOS XE), от 16.12 до 16.12.3 (Cisco IOS XE), от 16.12 до 16.12.1t (Cisco IOS XE), от 16.12 до 16.12.3s (Cisco IOS XE), от 16.12 до 16.12.4a (Cisco IOS XE), от 16.12 до 16.12.1z1 (Cisco IOS XE), от 16.12 до 16.12.1z2 (Cisco IOS XE), от 17.1 до 17.1.1a (Cisco IOS XE), от 17.1 до 17.1.1t (Cisco IOS XE), от 17.2 до 17.2.1r (Cisco IOS XE), от 17.3 до 17.3.2 (Cisco IOS XE), от 17.3 до 17.3.2a (Cisco IOS XE), от 17.4 до 17.4.1b (Cisco IOS XE)

Product types

Operating system, Network appliance software

Platforms

Cisco Systems, Inc. Cisco IOS XE от 16.9.0 до 16.9.5 Catalyst 9200 Series, Inc. Cisco IOS XE от 17.2 до 17.2.2, Inc. Cisco IOS XE от 17.4 до 17.4.1, Inc. Cisco IOS XE от 16.7 до 16.7.2, Inc. Cisco IOS XE от 16.8 до 16.8.1s, Inc. Cisco IOS XE от 16.8 до 16.8.2, Inc. Cisco IOS XE от 16.9 до 16.9.1, Inc. Cisco IOS XE от 16.9 до 16.9.1b, Inc. Cisco IOS XE от 16.9 до 16.9.1d, Inc. Cisco IOS XE от 16.9 до 16.9.2s, Inc. Cisco IOS XE от 16.9 до 16.9.3s, Inc. Cisco IOS XE от 16.9 до 16.9.7, Inc. Cisco IOS XE от 16.10 до 16.10.1a, Inc. Cisco IOS XE от 16.10 до 16.10.1c, Inc. Cisco IOS XE от 16.10 до 16.10.3, Inc. Cisco IOS XE от 16.11 до 16.11.1b, Inc. Cisco IOS XE от 16.11 до 16.11.1c, Inc. Cisco IOS XE от 16.12 до 16.12.1a, Inc. Cisco IOS XE от 16.12 до 16.12.3, Inc. Cisco IOS XE от 16.12 до 16.12.1t, Inc. Cisco IOS XE от 16.12 до 16.12.3s, Inc. Cisco IOS XE от 16.12 до 16.12.4a, Inc. Cisco IOS XE от 16.12 до 16.12.1z1, Inc. Cisco IOS XE от 16.12 до 16.12.1z2, Inc. Cisco IOS XE от 17.1 до 17.1.1a, Inc. Cisco IOS XE от 17.1 до 17.1.1t, Inc. Cisco IOS XE от 17.2 до 17.2.1r, Inc. Cisco IOS XE от 17.3 до 17.3.2, Inc. Cisco IOS XE от 17.3 до 17.3.2a, Inc. Cisco IOS XE от 17.4 до 17.4.1b

Mitigations

Использование рекомендаций: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-fnf-dos-bOL5vLge

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Cisco Systems, Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u043e\u0442 16.9.0 \u0434\u043e 16.9.5 (Cisco IOS XE), \u043e\u0442 17.2 \u0434\u043e 17.2.2 (Cisco IOS XE), \u043e\u0442 17.4 \u0434\u043e 17.4.1 (Cisco IOS XE), \u043e\u0442 16.7 \u0434\u043e 16.7.2 (Cisco IOS XE), \u043e\u0442 16.8 \u0434\u043e 16.8.1s (Cisco IOS XE), \u043e\u0442 16.8 \u0434\u043e 16.8.2 (Cisco IOS XE), \u043e\u0442 16.9 \u0434\u043e 16.9.1 (Cisco IOS XE), \u043e\u0442 16.9 \u0434\u043e 16.9.1b (Cisco IOS XE), \u043e\u0442 16.9 \u0434\u043e 16.9.1d (Cisco IOS XE), \u043e\u0442 16.9 \u0434\u043e 16.9.2s (Cisco IOS XE), \u043e\u0442 16.9 \u0434\u043e 16.9.3s (Cisco IOS XE), \u043e\u0442 16.9 \u0434\u043e 16.9.7 (Cisco IOS XE), \u043e\u0442 16.10 \u0434\u043e 16.10.1a (Cisco IOS XE), \u043e\u0442 16.10 \u0434\u043e 16.10.1c (Cisco IOS XE), \u043e\u0442 16.10 \u0434\u043e 16.10.3 (Cisco IOS XE), \u043e\u0442 16.11 \u0434\u043e 16.11.1b (Cisco IOS XE), \u043e\u0442 16.11 \u0434\u043e 16.11.1c (Cisco IOS XE), \u043e\u0442 16.12 \u0434\u043e 16.12.1a (Cisco IOS XE), \u043e\u0442 16.12 \u0434\u043e 16.12.3 (Cisco IOS XE), \u043e\u0442 16.12 \u0434\u043e 16.12.1t (Cisco IOS XE), \u043e\u0442 16.12 \u0434\u043e 16.12.3s (Cisco IOS XE), \u043e\u0442 16.12 \u0434\u043e 16.12.4a (Cisco IOS XE), \u043e\u0442 16.12 \u0434\u043e 16.12.1z1 (Cisco IOS XE), \u043e\u0442 16.12 \u0434\u043e 16.12.1z2 (Cisco IOS XE), \u043e\u0442 17.1 \u0434\u043e 17.1.1a (Cisco IOS XE), \u043e\u0442 17.1 \u0434\u043e 17.1.1t (Cisco IOS XE), \u043e\u0442 17.2 \u0434\u043e 17.2.1r (Cisco IOS XE), \u043e\u0442 17.3 \u0434\u043e 17.3.2 (Cisco IOS XE), \u043e\u0442 17.3 \u0434\u043e 17.3.2a (Cisco IOS XE), \u043e\u0442 17.4 \u0434\u043e 17.4.1b (Cisco IOS XE)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-fnf-dos-bOL5vLge",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "02.11.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "29.06.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "29.06.2022",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2022-03923",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2022-20683, SB2022041411",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Cisco IOS XE",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.9.0 \u0434\u043e 16.9.5 Catalyst 9200 Series, Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 17.2 \u0434\u043e 17.2.2 , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 17.4 \u0434\u043e 17.4.1 , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.7 \u0434\u043e 16.7.2 , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.8 \u0434\u043e 16.8.1s , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.8 \u0434\u043e 16.8.2 , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.9 \u0434\u043e 16.9.1 , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.9 \u0434\u043e 16.9.1b , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.9 \u0434\u043e 16.9.1d , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.9 \u0434\u043e 16.9.2s , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.9 \u0434\u043e 16.9.3s , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.9 \u0434\u043e 16.9.7 , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.10 \u0434\u043e 16.10.1a , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.10 \u0434\u043e 16.10.1c , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.10 \u0434\u043e 16.10.3 , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.11 \u0434\u043e 16.11.1b , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.11 \u0434\u043e 16.11.1c , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.12 \u0434\u043e 16.12.1a , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.12 \u0434\u043e 16.12.3 , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.12 \u0434\u043e 16.12.1t , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.12 \u0434\u043e 16.12.3s , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.12 \u0434\u043e 16.12.4a , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.12 \u0434\u043e 16.12.1z1 , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 16.12 \u0434\u043e 16.12.1z2 , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 17.1 \u0434\u043e 17.1.1a , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 17.1 \u0434\u043e 17.1.1t , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 17.2 \u0434\u043e 17.2.1r , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 17.3 \u0434\u043e 17.3.2 , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 17.3 \u0434\u043e 17.3.2a , Cisco Systems, Inc. Cisco IOS XE \u043e\u0442 17.4 \u0434\u043e 17.4.1b ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 Application Visibility and Control (AVC-FNF) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Cisco IOS XE \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 Cisco Catalyst \u0441\u0435\u0440\u0438\u0438 9800 \u0438 9800-CL for Cloud, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u044b\u0445\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 (CWE-119), \u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0433\u0440\u0430\u043d\u0438\u0446\u044b (CWE-124)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 Application Visibility and Control (AVC-FNF) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Cisco IOS XE \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 Cisco Catalyst \u0441\u0435\u0440\u0438\u0438 9800 \u0438 9800-CL for Cloud \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435\u043c \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-fnf-dos-bOL5vLge\nhttps://www.cybersecurity-help.cz/vdb/SB2022041411\nhttps://vuldb.com/?id.197443",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-119, CWE-124",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,6)"
}

CVE-2022-20683 (GCVE-0-2022-20683)

Vulnerability from cvelistv5 – Published: 2022-04-15 14:16 – Updated: 2024-11-06 16:26

Title

Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability

Summary

A vulnerability in the Application Visibility and Control (AVC-FNF) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient packet verification for traffic inspected by the AVC feature. An attacker could exploit this vulnerability by sending crafted packets from the wired network to a wireless client, resulting in the crafted packets being processed by the wireless controller. A successful exploit could allow the attacker to cause a crash and reload of the affected device, resulting in a DoS condition.

Severity

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-06 16:01 UTC

CWE

CWE-124

Assigner

cisco mitre root

References

1 reference

URL	Tags
https://tools.cisco.com/security/center/content/C…	vendor-advisoryx_refsource_CISCO

Impacted products

1 product

Vendor	Product	Version
Cisco	Cisco IOS XE Software	Affected: n/a

Date Public

2022-04-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T02:17:53.170Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20220413 Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-fnf-dos-bOL5vLge"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-20683",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-06T16:01:44.839830Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-06T16:26:03.493Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco IOS XE Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2022-04-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the Application Visibility and Control (AVC-FNF) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient packet verification for traffic inspected by the AVC feature. An attacker could exploit this vulnerability by sending crafted packets from the wired network to a wireless client, resulting in the crafted packets being processed by the wireless controller. A successful exploit could allow the attacker to cause a crash and reload of the affected device, resulting in a DoS condition."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-124",
              "description": "CWE-124",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-15T14:16:18.000Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "20220413 Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-fnf-dos-bOL5vLge"
        }
      ],
      "source": {
        "advisory": "cisco-sa-c9800-fnf-dos-bOL5vLge",
        "defect": [
          [
            "CSCvx21714"
          ]
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "DATE_PUBLIC": "2022-04-13T23:00:00",
          "ID": "CVE-2022-20683",
          "STATE": "PUBLIC",
          "TITLE": "Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco IOS XE Software",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Cisco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the Application Visibility and Control (AVC-FNF) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient packet verification for traffic inspected by the AVC feature. An attacker could exploit this vulnerability by sending crafted packets from the wired network to a wireless client, resulting in the crafted packets being processed by the wireless controller. A successful exploit could allow the attacker to cause a crash and reload of the affected device, resulting in a DoS condition."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
          }
        ],
        "impact": {
          "cvss": {
            "baseScore": "8.6",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-124"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20220413 Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-fnf-dos-bOL5vLge"
            }
          ]
        },
        "source": {
          "advisory": "cisco-sa-c9800-fnf-dos-bOL5vLge",
          "defect": [
            [
              "CSCvx21714"
            ]
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2022-20683",
    "datePublished": "2022-04-15T14:16:19.103Z",
    "dateReserved": "2021-11-02T00:00:00.000Z",
    "dateUpdated": "2024-11-06T16:26:03.493Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.