CVE-2022-20623: Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection Denial of Service Vulnerability
A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause BFD traffic to be dropped on an affected device. This vulnerability is due to a logic error in the BFD rate limiter functionality. An attacker could exploit this vulnerability by sending a crafted stream of traffic through the device. A successful exploit could allow the attacker to cause BFD traffic to be dropped, resulting in BFD session flaps. BFD session flaps can cause route instability and dropped traffic, resulting in a denial of service (DoS) condition. This vulnerability applies to both IPv4 and IPv6 traffic.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-20623.
What is the severity of CVE-2022-20623?
The severity of CVE-2022-20623 is high, with a severity value of 7.5.
Which Cisco products are affected by CVE-2022-20623?
Cisco NX-OS Software for Cisco Nexus 9000 Series Switches is affected by CVE-2022-20623.
How can an attacker exploit this vulnerability?
An unauthenticated, remote attacker can exploit this vulnerability to cause BFD traffic to be dropped on an affected device.
Is there a fix available for CVE-2022-20623?
Yes, Cisco has released a security advisory with mitigation details for CVE-2022-20623. Please refer to the advisory for more information.