CVE-2022-20675 (CNNVD-202204-2471)
中文标题:
多款 Cisco 产品安全漏洞
英文标题:
Multiple Cisco Security Products Simple Network Management Protocol Service Denial of Service Vulnerability
漏洞描述
中文描述:
Cisco Email Security Appliance（ESA）等都是美国思科（Cisco）公司的产品。Cisco Email Security Appliance是一个电子邮件安全设备。Cisco Web Security Appliance（WSA）是一款Web安全设备。Cisco Secure Email是 Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), 和 Cisco Secure Email and Web Manager 存在安全漏洞，该漏洞源于 TCP 端口 199 上的开放端口侦听器。攻击者可以通过连接到 TCP 端口 199 来利用此漏洞。成功利用可能使攻击者崩溃 SNMP 服务，从而导致 DoS 条件。
英文描述:
A vulnerability in the TCP/IP stack of Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Secure Email and Web Manager, formerly Security Management Appliance, could allow an unauthenticated, remote attacker to crash the Simple Network Management Protocol (SNMP) service, resulting in a denial of service (DoS) condition. This vulnerability is due to an open port listener on TCP port 199. An attacker could exploit this vulnerability by connecting to TCP port 199. A successful exploit could allow the attacker to crash the SNMP service, resulting in a DoS condition.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco Web Security Appliance (WSA) | n/a | - | - |
cpe:2.3:a:cisco:cisco_web_security_appliance_(wsa):n_a:*:*:*:*:*:*:*
|
| cisco | asyncos | * | - | - |
cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2022-20675 |
2025-11-11 15:21:15 | 2025-11-11 07:37:15 |
| NVD | nvd_CVE-2022-20675 |
2025-11-11 14:58:16 | 2025-11-11 07:45:32 |
| CNNVD | cnnvd_CNNVD-202204-2471 |
2025-11-11 15:10:51 | 2025-11-11 07:57:13 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202204-2471
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 2
- data_sources: ['cve'] -> ['cve', 'nvd']