CVE-2022-20823

High

Description

A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incomplete input validation of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending a malicious OSPFv3 link-state advertisement (LSA) to an affected device. A successful exploit could allow the attacker to cause the OSPFv3 process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition. Note: The OSPFv3 feature is disabled by default. To exploit this vulnerability, an attacker must be able to establish a full OSPFv3 neighbor state with an affected device. For more information about exploitation conditions, see the Details section of this advisory.

SeverityHigh
CVSS8.6
Exploit probability—
ProductCisco Nexus 3016 Firmware
PublishedAug 25, 2022
First seenAug 25, 2022
Weakness typeCWE-126CWE-126

How to fix

Affected products

ProductAffected versionsFixed in
cisco nexus_3016_firmwareNo range specified—
cisco nexus_3016q_firmwareNo range specified—
cisco nexus_3048_firmwareNo range specified—
cisco nexus_3064_firmwareNo range specified—
cisco nexus_3064-32t_firmwareNo range specified—
cisco nexus_3064-t_firmwareNo range specified—
cisco nexus_3064-x_firmwareNo range specified—
cisco nexus_3064t_firmwareNo range specified—
cisco nexus_3064x_firmwareNo range specified—
cisco nexus_3100_firmwareNo range specified—
cisco nexus_3100-v_firmwareNo range specified—
cisco nexus_3100-z_firmwareNo range specified—
cisco nexus_3100v_firmwareNo range specified—
cisco nexus_31108pc-v_firmwareNo range specified—
cisco nexus_31108pv-v_firmwareNo range specified—
cisco nexus_31108tc-v_firmwareNo range specified—
cisco nexus_31128pq_firmwareNo range specified—
cisco nexus_3132c-z_firmwareNo range specified—
cisco nexus_3132q_firmwareNo range specified—
cisco nexus_3132q-v_firmwareNo range specified—
cisco nexus_3132q-x_firmwareNo range specified—
cisco nexus_3132q-x\/3132q-xl_firmwareNo range specified—
cisco nexus_3132q-xl_firmwareNo range specified—
cisco nexus_3164q_firmwareNo range specified—
cisco nexus_3172_firmwareNo range specified—
cisco nexus_3172pq_firmwareNo range specified—
cisco nexus_3172pq-xl_firmwareNo range specified—
cisco nexus_3172pq\/pq-xl_firmwareNo range specified—
cisco nexus_3172tq_firmwareNo range specified—
cisco nexus_3172tq-32t_firmwareNo range specified—
cisco nexus_3172tq-xl_firmwareNo range specified—
cisco nexus_3200_firmwareNo range specified—
cisco nexus_3232c_firmwareNo range specified—
cisco nexus_3232c__firmwareNo range specified—
cisco nexus_3264c-e_firmwareNo range specified—
cisco nexus_3264q_firmwareNo range specified—
cisco nexus_3400_firmwareNo range specified—
cisco nexus_3408-s_firmwareNo range specified—
cisco nexus_34180yc_firmwareNo range specified—
cisco nexus_34200yc-sm_firmwareNo range specified—
cisco nexus_3432d-s_firmwareNo range specified—
cisco nexus_3464c_firmwareNo range specified—
cisco nexus_3500_firmwareNo range specified—
cisco nexus_3500_platform_firmwareNo range specified—
cisco nexus_3524_firmwareNo range specified—
cisco nexus_3524-x_firmwareNo range specified—
cisco nexus_3524-x\/xl_firmwareNo range specified—
cisco nexus_3524-xl_firmwareNo range specified—
cisco nexus_3548_firmwareNo range specified—
cisco nexus_3548-x_firmwareNo range specified—
cisco nexus_3548-x\/xl_firmwareNo range specified—
cisco nexus_3548-xl_firmwareNo range specified—
cisco nexus_3600_firmwareNo range specified—
cisco nexus_36180yc-r_firmwareNo range specified—
cisco nexus_3636c-r_firmwareNo range specified—
cisco nexus_5500_firmwareNo range specified—
cisco nexus_5548p_firmwareNo range specified—
cisco nexus_5548up_firmwareNo range specified—
cisco nexus_5596t_firmwareNo range specified—
cisco nexus_5596up_firmwareNo range specified—
cisco nexus_5600_firmwareNo range specified—
cisco nexus_56128p_firmwareNo range specified—
cisco nexus_5624q_firmwareNo range specified—
cisco nexus_5648q_firmwareNo range specified—
cisco nexus_5672up_firmwareNo range specified—
cisco nexus_5672up-16g_firmwareNo range specified—
cisco nexus_5696q_firmwareNo range specified—
cisco nexus_6000_firmwareNo range specified—
cisco nexus_6001_firmwareNo range specified—
cisco nexus_6001p_firmwareNo range specified—
cisco nexus_6001t_firmwareNo range specified—
cisco nexus_6004_firmwareNo range specified—
cisco nexus_6004x_firmwareNo range specified—
cisco nexus_7000_firmwareNo range specified—
cisco nexus_7000_10-slot_firmwareNo range specified—
cisco nexus_7000_18-slot_firmwareNo range specified—
cisco nexus_7000_4-slot_firmwareNo range specified—
cisco nexus_7000_9-slot_firmwareNo range specified—
cisco nexus_7000_supervisor_1_firmwareNo range specified—
cisco nexus_7000_supervisor_2_firmwareNo range specified—
cisco nexus_7000_supervisor_2e_firmwareNo range specified—
cisco nexus_7004_firmwareNo range specified—
cisco nexus_7009_firmwareNo range specified—
cisco nexus_7010_firmwareNo range specified—
cisco nexus_7018_firmwareNo range specified—
cisco nexus_7700_firmwareNo range specified—
cisco nexus_7700_10-slot_firmwareNo range specified—
cisco nexus_7700_18-slot_firmwareNo range specified—
cisco nexus_7700_2-slot_firmwareNo range specified—
cisco nexus_7700_6-slot_firmwareNo range specified—
cisco nexus_7700_supervisor_2e_firmwareNo range specified—
cisco nexus_7700_supervisor_3e_firmwareNo range specified—
cisco nexus_7702_firmwareNo range specified—
cisco nexus_7706_firmwareNo range specified—
cisco nexus_7710_firmwareNo range specified—
cisco nexus_7718_firmwareNo range specified—
cisco nexus_9000_firmwareNo range specified—
cisco nexus_9000v_firmwareNo range specified—
cisco nexus_9200_firmwareNo range specified—
cisco nexus_92160yc-x_firmwareNo range specified—
cisco nexus_9221c_firmwareNo range specified—
cisco nexus_92300yc_firmwareNo range specified—
cisco nexus_92304qc_firmwareNo range specified—
cisco nexus_92348gc-x_firmwareNo range specified—
cisco nexus_9236c_firmwareNo range specified—
cisco nexus_9272q_firmwareNo range specified—
cisco nexus_9300_firmwareNo range specified—
cisco nexus_93108tc-ex_firmwareNo range specified—
cisco nexus_93108tc-ex-24_firmwareNo range specified—
cisco nexus_93108tc-fx_firmwareNo range specified—
cisco nexus_93108tc-fx-24_firmwareNo range specified—
cisco nexus_93108tc-fx3p_firmwareNo range specified—
cisco nexus_93120tx_firmwareNo range specified—
cisco nexus_93128_firmwareNo range specified—
cisco nexus_93128tx_firmwareNo range specified—
cisco nexus_9316d-gx_firmwareNo range specified—
cisco nexus_93180lc-ex_firmwareNo range specified—
cisco nexus_93180tc-ex_firmwareNo range specified—
cisco nexus_93180yc-ex_firmwareNo range specified—
cisco nexus_93180yc-ex-24_firmwareNo range specified—
cisco nexus_93180yc-fx_firmwareNo range specified—
cisco nexus_93180yc-fx-24_firmwareNo range specified—
cisco nexus_93180yc-fx3_firmwareNo range specified—
cisco nexus_93180yc-fx3s_firmwareNo range specified—
cisco nexus_93216tc-fx2_firmwareNo range specified—
cisco nexus_93240yc-fx2_firmwareNo range specified—
cisco nexus_9332c_firmwareNo range specified—
cisco nexus_9332pq_firmwareNo range specified—
cisco nexus_93360yc-fx2_firmwareNo range specified—
cisco nexus_9336c-fx2_firmwareNo range specified—
cisco nexus_9336c-fx2-e_firmwareNo range specified—
cisco nexus_9336pq_firmwareNo range specified—
cisco nexus_9348gc-fxp_firmwareNo range specified—
cisco nexus_93600cd-gx_firmwareNo range specified—
cisco nexus_9364c_firmwareNo range specified—
cisco nexus_9364c-gx_firmwareNo range specified—
cisco nexus_9372px_firmwareNo range specified—
cisco nexus_9372px-e_firmwareNo range specified—
cisco nexus_9372tx_firmwareNo range specified—
cisco nexus_9372tx-e_firmwareNo range specified—
cisco nexus_9396px_firmwareNo range specified—
cisco nexus_9396tx_firmwareNo range specified—
cisco nexus_9500_firmwareNo range specified—
cisco nexus_9500r_firmwareNo range specified—
cisco nexus_9504_firmwareNo range specified—
cisco nexus_9508_firmwareNo range specified—
cisco nexus_9516_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.