CVE-2022-20675
Description
A vulnerability in the TCP/IP stack of Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Secure Email and Web Manager, formerly Security Management Appliance, could allow an unauthenticated, remote attacker to crash the Simple Network Management Protocol (SNMP) service, resulting in a denial of service (DoS) condition. This vulnerability is due to an open port listener on TCP port 199. An attacker could exploit this vulnerability by connecting to TCP port 199. A successful exploit could allow the attacker to crash the SNMP service, resulting in a DoS condition.
How to fix
- cisco asyncos14.02.0-020, 14.1.0-239, 14.0.2-012 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco asyncos | 14.0 ≤ v < 14.02.0-020, 12.5 ≤ v < 14.1.0-239, 12.0 ≤ v < 14.0.2-012 | 14.02.0-020, 14.1.0-239, 14.0.2-012 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.