PT-2022-7048 · Cisco · Cisco Ios Xe

Published 2022-04-13 · Updated 2022-04-27 · CVE-2022-20694

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software (affected versions not specified)

Description The issue is related to the incorrect handling of a specific RPKI to Router (RTR) Protocol packet header in the implementation of the Resource Public Key Infrastructure (RPKI) feature. This could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol (BGP) process to crash, resulting in a denial of service (DoS) condition. An attacker could exploit this by compromising the RPKI validator server and sending a specifically crafted RTR packet to an affected device, or by using man-in-the-middle techniques to impersonate the RPKI validator server and send a crafted RTR response packet over the established RTR TCP connection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

BDU:2023-07226

CVE-2022-20694

Affected Products

Cisco Ios Xe

References · 7

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-rpki-dos-2EgCNeKE · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07226 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-rpki-dos-2EgCNeKE · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-20694 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20694 · Security Note
• https://t.me/cvenotify/29008 · Telegram Post
• https://t.me/cibsecurity/40859 · Telegram Post