CVE-2022-20856 (CNNVD-202209-2911)
中文标题:
Cisco IOS XE Wireless Controller software 安全漏洞
英文标题:
Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service Vulnerability
漏洞描述
中文描述:
Cisco IOS XE Wireless Controller software是美国思科（Cisco）公司的一个无线局域网控制器。提供一个管理网络功能 Cisco IOS XE Wireless Controller Software Catalyst 9000存在安全漏洞，该漏洞源于在处理CAPWAP Mobility消息相关时出现逻辑错误和资源管理不当问题。
英文描述:
A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) Mobility messages in Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a logic error and improper management of resources related to the handling of CAPWAP Mobility messages. An attacker could exploit this vulnerability by sending crafted CAPWAP Mobility packets to an affected device. A successful exploit could allow the attacker to exhaust resources on the affected device. This would cause the device to reload, resulting in a DoS condition.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco IOS XE Software | n/a | - | - |
cpe:2.3:a:cisco:cisco_ios_xe_software:n_a:*:*:*:*:*:*:*
|
| cisco | ios_xe | 17.3.4c | - | - |
cpe:2.3:o:cisco:ios_xe:17.3.4c:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2022-20856 |
2025-11-11 15:21:15 | 2025-11-11 07:37:15 |
| NVD | nvd_CVE-2022-20856 |
2025-11-11 14:58:25 | 2025-11-11 07:45:32 |
| CNNVD | cnnvd_CNNVD-202209-2911 |
2025-11-11 15:11:01 | 2025-11-11 07:57:33 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202209-2911
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 2
- data_sources: ['cve'] -> ['cve', 'nvd']