CVE-2022-20761

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 15-04-2022 05:15

Last modified: - 25-04-2022 11:11

Total changes: - 2

Description

A vulnerability in the integrated wireless access point (AP) packet processing of the Cisco 1000 Series Connected Grid Router (CGR1K) could allow an unauthenticated, adjacent attacker to cause a denial of service condition on an affected device. This vulnerability is due to insufficient input validation of received traffic. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the integrated AP to stop processing traffic, resulting in a DoS condition. It may be necessary to manually reload the CGR1K to restore AP operation.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Low

Attack complexity

Adjacent

Attack vector

High

Availability

None

Confidentiality

None

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

6.5

Base score

2.8

3.6

Exploitability score

Impact score

Verification logic

vendor=cisco AND product=ios AND version=15.4\(1\)cg

vendor=cisco AND product=ios AND version=15.4\(2\)cg

vendor=cisco AND product=ios AND version=15.4\(3\)m

vendor=cisco AND product=ios AND version=15.4\(3\)m1

vendor=cisco AND product=ios AND version=15.4\(3\)m2

vendor=cisco AND product=ios AND version=15.4\(3\)m3

vendor=cisco AND product=ios AND version=15.4\(3\)m4

vendor=cisco AND product=ios AND version=15.4\(3\)m5

vendor=cisco AND product=ios AND version=15.4\(3\)m6

vendor=cisco AND product=ios AND version=15.4\(3\)m6a

vendor=cisco AND product=ios AND version=15.4\(3\)m7

vendor=cisco AND product=ios AND version=15.4\(3\)m8

vendor=cisco AND product=ios AND version=15.4\(3\)m9

vendor=cisco AND product=ios AND version=15.4\(3\)m10

vendor=cisco AND product=ios AND version=15.5\(1\)t

vendor=cisco AND product=ios AND version=15.5\(1\)t2

vendor=cisco AND product=ios AND version=15.5\(1\)t3

vendor=cisco AND product=ios AND version=15.5\(1\)t4

vendor=cisco AND product=ios AND version=15.5\(2\)t

vendor=cisco AND product=ios AND version=15.5\(2\)t1

vendor=cisco AND product=ios AND version=15.5\(2\)t2

vendor=cisco AND product=ios AND version=15.5\(2\)t3

vendor=cisco AND product=ios AND version=15.5\(2\)t4

vendor=cisco AND product=ios AND version=15.5\(3\)m

vendor=cisco AND product=ios AND version=15.5\(3\)m1

vendor=cisco AND product=ios AND version=15.5\(3\)m2

vendor=cisco AND product=ios AND version=15.5\(3\)m2a

vendor=cisco AND product=ios AND version=15.5\(3\)m3

vendor=cisco AND product=ios AND version=15.5\(3\)m4

vendor=cisco AND product=ios AND version=15.5\(3\)m4a

vendor=cisco AND product=ios AND version=15.5\(3\)m5

vendor=cisco AND product=ios AND version=15.5\(3\)m6

vendor=cisco AND product=ios AND version=15.5\(3\)m6a

vendor=cisco AND product=ios AND version=15.5\(3\)m7

vendor=cisco AND product=ios AND version=15.5\(3\)m8

vendor=cisco AND product=ios AND version=15.5\(3\)m9

vendor=cisco AND product=ios AND version=15.5\(3\)m10

vendor=cisco AND product=ios AND version=15.6\(1\)t

vendor=cisco AND product=ios AND version=15.6\(1\)t0a

vendor=cisco AND product=ios AND version=15.6\(1\)t1

vendor=cisco AND product=ios AND version=15.6\(1\)t2

vendor=cisco AND product=ios AND version=15.6\(1\)t3

vendor=cisco AND product=ios AND version=15.6\(2\)t

vendor=cisco AND product=ios AND version=15.6\(2\)t1

vendor=cisco AND product=ios AND version=15.6\(2\)t2

vendor=cisco AND product=ios AND version=15.6\(2\)t3

vendor=cisco AND product=ios AND version=15.6\(3\)m

vendor=cisco AND product=ios AND version=15.6\(3\)m0a

vendor=cisco AND product=ios AND version=15.6\(3\)m1

vendor=cisco AND product=ios AND version=15.6\(3\)m1b

vendor=cisco AND product=ios AND version=15.6\(3\)m2

vendor=cisco AND product=ios AND version=15.6\(3\)m3

vendor=cisco AND product=ios AND version=15.6\(3\)m3a

vendor=cisco AND product=ios AND version=15.6\(3\)m4

vendor=cisco AND product=ios AND version=15.6\(3\)m5

vendor=cisco AND product=ios AND version=15.6\(3\)m6

vendor=cisco AND product=ios AND version=15.6\(3\)m6a

vendor=cisco AND product=ios AND version=15.6\(3\)m7

vendor=cisco AND product=ios AND version=15.6\(3\)m8

vendor=cisco AND product=ios AND version=15.7\(3\)m

vendor=cisco AND product=ios AND version=15.7\(3\)m1

vendor=cisco AND product=ios AND version=15.7\(3\)m2

vendor=cisco AND product=ios AND version=15.7\(3\)m3

vendor=cisco AND product=ios AND version=15.7\(3\)m4

vendor=cisco AND product=ios AND version=15.7\(3\)m4a

vendor=cisco AND product=ios AND version=15.7\(3\)m5

vendor=cisco AND product=ios AND version=15.7\(3\)m6

vendor=cisco AND product=ios AND version=15.8\(3\)m

vendor=cisco AND product=ios AND version=15.8\(3\)m0a

vendor=cisco AND product=ios AND version=15.8\(3\)m1

vendor=cisco AND product=ios AND version=15.8\(3\)m2

vendor=cisco AND product=ios AND version=15.8\(3\)m3a

vendor=cisco AND product=ios AND version=15.8\(3\)m3b

vendor=cisco AND product=ios AND version=15.8\(3\)m4

vendor=cisco AND product=ios AND version=15.8\(3\)m5

vendor=cisco AND product=ios AND version=15.8\(3\)m6

vendor=cisco AND product=ios AND version=15.8\(3\)m7

vendor=cisco AND product=ios AND version=15.9\(3\)m

vendor=cisco AND product=ios AND version=15.9\(3\)m0a

vendor=cisco AND product=ios AND version=15.9\(3\)m1

vendor=cisco AND product=ios AND version=15.9\(3\)m2

vendor=cisco AND product=ios AND version=15.9\(3\)m3

vendor=cisco AND product=ios AND version=15.9\(3\)m3a

vendor=cisco AND product=ios AND version=15.9\(3\)m3b

vendor=cisco AND product=ios AND version=15.9\(3\)m4

vendor=cisco AND product=ios AND version=15.9\(3\)m4a

Reference

20220413 Cisco 1000 Series Connected Grid Router Integrated Wireless Access Point Denial of Service Vulnerability-Vendor Advisory

Keywords

CVE-2022-20761

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2022-20761

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures