csirt@kutim:~/threat-intel/cve/CVE-2022-20694

Katalog CVE

CVSS 6.8 · Medium EPSS 1,2%

Kerentanan Reachable Assertion pada cisco ios xe. Skor CVSS 3.1 6.8 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol (BGP) process to crash, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of a specific RPKI to Router (RTR) Protocol packet header. An attacker could exploit this vulnerability by compromising the RPKI validator server and sending a specifically crafted RTR packet to an affected device. Alternatively, the attacker could use man-in-the-middle techniques to impersonate the RPKI validator server and send a crafted RTR response packet over the established RTR TCP connection to the affected device. A successful exploit could allow the attacker to cause a DoS condition because the BGP process could constantly restart and BGP routing could become unstable.

Rincian

Terbit di NVD
15 April 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.8 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-617: Reachable Assertion
EPSS (30 hari)
1,2% peluang dieksploitasi; lebih tinggi dari 66,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco ios xe Versi 3.7.0bs
cisco ios xe Versi 3.7.0s
cisco ios xe Versi 3.7.0xas
cisco ios xe Versi 3.7.0xbs
cisco ios xe Versi 3.7.1as
cisco ios xe Versi 3.7.1s
cisco ios xe Versi 3.7.2s
cisco ios xe Versi 3.7.2ts
cisco ios xe Versi 3.7.3s
cisco ios xe Versi 3.7.4as
cisco ios xe Versi 3.7.4s
cisco ios xe Versi 3.7.5s
cisco ios xe Versi 3.7.6s
cisco ios xe Versi 3.7.7s
cisco ios xe Versi 3.7.8s
cisco ios xe Versi 3.8.0s
cisco ios xe Versi 3.8.1s
cisco ios xe Versi 3.8.2s
cisco ios xe Versi 3.9.0as
cisco ios xe Versi 3.9.0s
cisco ios xe Versi 3.9.0xas
cisco ios xe Versi 3.9.1as
cisco ios xe Versi 3.9.1s
cisco ios xe Versi 3.9.2s
cisco ios xe Versi 3.10.0s
cisco ios xe Versi 3.10.1s
cisco ios xe Versi 3.10.1xbs
cisco ios xe Versi 3.10.1xcs
cisco ios xe Versi 3.10.2as
cisco ios xe Versi 3.10.2s
cisco ios xe Versi 3.10.2ts
cisco ios xe Versi 3.10.3s
cisco ios xe Versi 3.10.4s
cisco ios xe Versi 3.10.5s
cisco ios xe Versi 3.10.6s
cisco ios xe Versi 3.10.7s
cisco ios xe Versi 3.10.8as
cisco ios xe Versi 3.10.8s
cisco ios xe Versi 3.10.9s
cisco ios xe Versi 3.10.10s
cisco ios xe Versi 3.11.0s
cisco ios xe Versi 3.11.1s
cisco ios xe Versi 3.11.2s
cisco ios xe Versi 3.11.3s
cisco ios xe Versi 3.11.4s
cisco ios xe Versi 3.11.5e
cisco ios xe Versi 3.12.0as
cisco ios xe Versi 3.12.0s
cisco ios xe Versi 3.12.1s
cisco ios xe Versi 3.12.2s
cisco ios xe Versi 3.12.3s
cisco ios xe Versi 3.12.4s
cisco ios xe Versi 3.13.0as
cisco ios xe Versi 3.13.0s
cisco ios xe Versi 3.13.1s
cisco ios xe Versi 3.13.2as
cisco ios xe Versi 3.13.2s
cisco ios xe Versi 3.13.3s
cisco ios xe Versi 3.13.4s
cisco ios xe Versi 3.13.5as

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 234 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.