« Volver al listado

CVE-2022-20717

Estado: ModificadaMedia (5.5)—

A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cause an affected device to run out of memory, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient memory management when an affected device receives large amounts of traffic. An attacker could exploit this vulnerability by sending malicious traffic to an affected device. A successful exploit could allow the attacker to cause the device to crash, resulting in a DoS condition.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Sd-wan Vedge Router

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-20717",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2022-20717",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-11-06T15:59:05.080616Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "psirt@cisco.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "Cisco",
          "product": "Cisco SD-WAN vEdge router",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-04-15T15:15:13.113",
  "references": [
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vedge-dos-jerVm4bB",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vedge-dos-jerVm4bB",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@cisco.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-789"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cause an affected device to run out of memory, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient memory management when an affected device receives large amounts of traffic. An attacker could exploit this vulnerability by sending malicious traffic to an affected device. A successful exploit could allow the attacker to cause the device to crash, resulting in a DoS condition."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en el proceso NETCONF de los routers Cisco SD-WAN vEdge podría permitir a un atacante local autenticado causar a un dispositivo afectado quedarse sin memoria, resultando en una condición de denegación de servicio (DoS). Esta vulnerabilidad es debido a una administración insuficiente de la memoria cuando un dispositivo afectado recibe grandes cantidades de tráfico. Un atacante podría explotar esta vulnerabilidad mediante el envío de tráfico malicioso a un dispositivo afectado. Una explotación con éxito podría permitir al atacante causar un bloqueo del dispositivo, resultando en una condición de DoS"
    }
  ],
  "lastModified": "2026-06-17T04:24:56.190",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:sd-wan_vedge_router:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B7EA8D9-812D-4D62-A5A7-8994BDB0C8E5",
              "versionEndIncluding": "20.6"
            },
            {
              "criteria": "cpe:2.3:a:cisco:sd-wan_vedge_router:20.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26FADAB8-5A72-4B9D-9E9C-91A69F53B441"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
            },
            {
              "criteria": "cpe:2.3:h:citrix:sd-wan_1000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "99FC163D-E468-4D98-AE56-D4D29F5C05D7"
            },
            {
              "criteria": "cpe:2.3:h:citrix:sd-wan_110:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6062DBFF-04E4-48D9-A2A0-42BECE9E0EA2"
            },
            {
              "criteria": "cpe:2.3:h:citrix:sd-wan_1100:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3426DD26-48A7-408A-82B4-99CAA82804AF"
            },
            {
              "criteria": "cpe:2.3:h:citrix:sd-wan_2000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E387174A-1A9C-4A16-9F66-8158F06C89C5"
            },
            {
              "criteria": "cpe:2.3:h:citrix:sd-wan_210:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "42DBB6B2-E526-4C12-AED8-245D4E21A011"
            },
            {
              "criteria": "cpe:2.3:h:citrix:sd-wan_2100:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2524E92A-D661-4F31-9026-2F182B68CDC0"
            },
            {
              "criteria": "cpe:2.3:h:citrix:sd-wan_5100:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C022A51A-6D37-4AA9-82B5-19F17EA581CC"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}