Severity
High
Analysis Summary
CVE-2022-20823
Cisco NX-OS Software is vulnerable to a denial of service, caused by improper input validation of specific OSPFv3 packets. By sending a specially-crafted OSPFv3 link-state advertisement (LSA), a remote attacker could exploit this vulnerability to cause the OSPFv3 process to crash and restart multiple times.
Impact
- Denial of Service
Indicators Of Compromise
CVE
- CVE-2022-20823
Affected Vendors
Cisco
Affected Products
Cisco Nexus 3000 Series Switches
Cisco Nexus 6000 Series Switches
Cisco Nexus 7000 Series Switches
Cisco Nexus 5500 Platform Switches
Remediation
Refer to Cisco Security Advisory for patch, upgrade or suggested workaround information.