PT-2022-6347 · Cisco · Cisco Ios Xe

Published 2022-09-28 · Updated 2023-06-27 · CVE-2022-20848

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points (affected versions not specified)

Description A vulnerability in the UDP processing functionality could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This is due to the improper processing of UDP datagrams. An attacker could exploit this by sending malicious UDP datagrams to an affected device, potentially causing the device to reload.

Recommendations For Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points, update to a version that includes the fix for this issue, as mentioned in the Cisco security advisory. As a temporary workaround, consider restricting access to the UDP processing functionality until a patch is available. Avoid sending malicious UDP datagrams to affected devices until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-399

CWE-400

Related Identifiers

BDU:2023-00993

CVE-2022-20848

Affected Products

Cisco Ios Xe

References · 6

• https://osv.dev/vulnerability/CVE-2022-20848 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20848 · Security Note
• https://bdu.fstec.ru/vul/2023-00993 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-udp-dos-XDyEwhNz · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-udp-dos-XDyEwhNz · Vendor Advisory
• https://t.me/cibsecurity/50804 · Telegram Post