← Database

CVE-2022-20678

HIGH CVSS: 8.6 Published: 2022-04-15 Modified: 2026-06-17

Description

A vulnerability in the AppNav-XE feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of certain TCP segments. An attacker could exploit this vulnerability by sending a stream of crafted TCP traffic at a high rate through an interface of an affected device. That interface would need to have AppNav interception enabled. A successful exploit could allow the attacker to cause the device to reload.

Affected Platforms

Cisco 1131 Integrated Services RouterCisco Catalyst 8300-2N2S-6TCisco 1101 Integrated Services RouterCisco Catalyst 8500LCisco Catalyst 8500Cisco 1111X Integrated Services RouterCisco 1100-6G Integrated Services RouterCisco Catalyst 8300-1N1S-4T2XCisco 4431 Integrated Services RouterCisco 1160 Integrated Services Router

Weakness Type

CWE-413, CWE-755

References