CVE-2022-20625 (CNNVD-202202-1781)
中文标题:
Cisco NX-OS Software和Cisco FXOS Software 输入验证错误漏洞
英文标题:
Cisco FXOS and NX-OS Software Cisco Discovery Protocol Service Denial of Service Vulnerability
漏洞描述
中文描述:
Cisco NX-OS Software和Cisco FXOS Software都是美国思科（Cisco）公司的产品。Cisco NX-OS Software是一套交换机使用的数据中心级操作系统软件。Cisco FXOS Software是一套运行在思科安全设备中的防火墙软件。 Cisco FXOS Software 和 Cisco NX-OS Software 的 Cisco Discovery Protocol 存在输入验证错误漏洞，该漏洞源于思科FXOS软件和思科NX-OS软件的思科发现协议服务存在漏洞。攻击者可利用该漏洞导致服务重启，从而导致拒绝服务(DoS)状态。
英文描述:
A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to restart, resulting in a denial of service (DoS) condition. This vulnerability is due to improper handling of Cisco Discovery Protocol messages that are processed by the Cisco Discovery Protocol service. An attacker could exploit this vulnerability by sending a series of malicious Cisco Discovery Protocol messages to an affected device. A successful exploit could allow the attacker to cause the Cisco Discovery Protocol service to fail and restart. In rare conditions, repeated failures of the process could occur, which could cause the entire device to restart.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco NX-OS Software | n/a | - | - |
cpe:2.3:a:cisco:cisco_nx-os_software:n_a:*:*:*:*:*:*:*
|
| cisco | firepower_extensible_operating_system | * | - | - |
cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:*
|
| cisco | nx-os | 8.2\(7.34\) | - | - |
cpe:2.3:o:cisco:nx-os:8.2\(7.34\):*:*:*:*:*:*:*
|
| cisco | nx-os | 5.2\(1\)sv5\(1.3b\) | - | - |
cpe:2.3:o:cisco:nx-os:5.2\(1\)sv5\(1.3b\):*:*:*:*:*:*:*
|
| cisco | nx-os | 9.3\(8.15\) | - | - |
cpe:2.3:o:cisco:nx-os:9.3\(8.15\):*:*:*:*:*:*:*
|
| cisco | nx-os | 4.0\(1a\)a | - | - |
cpe:2.3:o:cisco:nx-os:4.0\(1a\)a:*:*:*:*:*:*:*
|
| cisco | nx-os | 4.1\(3f\)c | - | - |
cpe:2.3:o:cisco:nx-os:4.1\(3f\)c:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2022-20625 |
2025-11-11 15:21:15 | 2025-11-11 07:37:15 |
| NVD | nvd_CVE-2022-20625 |
2025-11-11 14:58:14 | 2025-11-11 07:45:31 |
| CNNVD | cnnvd_CNNVD-202202-1781 |
2025-11-11 15:10:50 | 2025-11-11 07:57:08 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 输入验证错误
- cnnvd_id: 未提取 -> CNNVD-202202-1781
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 7
- data_sources: ['cve'] -> ['cve', 'nvd']