8.6
High
CVE-2022-20697 A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an…
Description
A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper resource management in the HTTP server code. An attacker could exploit this vulnerability by sending a large number of HTTP requests to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco IOS | Versions not published |
References
Timeline
- Published
- Last modified
Other CVEs of Cisco IOS
The 36 CVEs of Cisco IOS →
CVE-2023-20081
A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco…
6.8
Medium
CVE-2023-20080
A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could…
8.6
High
CVE-2023-20076
A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to…
7.2
High
CVE-2022-20920
A vulnerability in the SSH implementation of Cisco IOS Software and Cisco IOS XE Software could allow an…
7.7
High