What is the severity of CVE-2022-20694?

CVE-2022-20694 has been classified with a high severity level due to its potential to cause a denial of service.

How do I fix CVE-2022-20694?

To mitigate CVE-2022-20694, users should upgrade to a fixed version of Cisco IOS XE software as specified in Cisco's advisory.

What causes CVE-2022-20694?

CVE-2022-20694 is caused by improper handling of specifically crafted requests in the Resource Public Key Infrastructure (RPKI) feature.

Which Cisco IOS XE versions are affected by CVE-2022-20694?

CVE-2022-20694 affects multiple versions of Cisco IOS XE, including 3.7.0bs, 3.10.10s, and various others as listed in the advisory.

Can CVE-2022-20694 be exploited remotely?

Yes, CVE-2022-20694 can be exploited by an unauthenticated, remote attacker, potentially leading to a DoS condition.

Vulnerability/
CVE-2022-20694

high

7.1

CWE

617

15/4/2022

6/11/2024

CVE-2022-20694: Cisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service Vulnerability

First published: Fri Apr 15 2022(Updated: )

A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol (BGP) process to crash, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of a specific RPKI to Router (RTR) Protocol packet header. An attacker could exploit this vulnerability by compromising the RPKI validator server and sending a specifically crafted RTR packet to an affected device. Alternatively, the attacker could use man-in-the-middle techniques to impersonate the RPKI validator server and send a crafted RTR response packet over the established RTR TCP connection to the affected device. A successful exploit could allow the attacker to cause a DoS condition because the BGP process could constantly restart and BGP routing could become unstable.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco IOS XE Software	=3.7.0bs
Cisco IOS XE Software	=3.7.0s
Cisco IOS XE Software	=3.7.0xas
Cisco IOS XE Software	=3.7.0xbs
Cisco IOS XE Software	=3.7.1as
Cisco IOS XE Software	=3.7.1s
Cisco IOS XE Software	=3.7.2s
Cisco IOS XE Software	=3.7.2ts
Cisco IOS XE Software	=3.7.3s
Cisco IOS XE Software	=3.7.4as
Cisco IOS XE Software	=3.7.4s
Cisco IOS XE Software	=3.7.5s
Cisco IOS XE Software	=3.7.6s
Cisco IOS XE Software	=3.7.7s
Cisco IOS XE Software	=3.7.8s
Cisco IOS XE Software	=3.8.0s
Cisco IOS XE Software	=3.8.1s
Cisco IOS XE Software	=3.8.2s
Cisco IOS XE Software	=3.9.0as
Cisco IOS XE Software	=3.9.0s
Cisco IOS XE Software	=3.9.0xas
Cisco IOS XE Software	=3.9.1as
Cisco IOS XE Software	=3.9.1s
Cisco IOS XE Software	=3.9.2s
Cisco IOS XE Software	=3.10.0s
Cisco IOS XE Software	=3.10.1s
Cisco IOS XE Software	=3.10.1xbs
Cisco IOS XE Software	=3.10.1xcs
Cisco IOS XE Software	=3.10.2as
Cisco IOS XE Software	=3.10.2s
Cisco IOS XE Software	=3.10.2ts
Cisco IOS XE Software	=3.10.3s
Cisco IOS XE Software	=3.10.4s
Cisco IOS XE Software	=3.10.5s
Cisco IOS XE Software	=3.10.6s
Cisco IOS XE Software	=3.10.7s
Cisco IOS XE Software	=3.10.8as
Cisco IOS XE Software	=3.10.8s
Cisco IOS XE Software	=3.10.9s
Cisco IOS XE Software	=3.10.10s
Cisco IOS XE Software	=3.11.0s
Cisco IOS XE Software	=3.11.1s
Cisco IOS XE Software	=3.11.2s
Cisco IOS XE Software	=3.11.3s
Cisco IOS XE Software	=3.11.4s
Cisco IOS XE Software	=3.11.5e
Cisco IOS XE Software	=3.12.0as
Cisco IOS XE Software	=3.12.0s
Cisco IOS XE Software	=3.12.1s
Cisco IOS XE Software	=3.12.2s
Cisco IOS XE Software	=3.12.3s
Cisco IOS XE Software	=3.12.4s
Cisco IOS XE Software	=3.13.0as
Cisco IOS XE Software	=3.13.0s
Cisco IOS XE Software	=3.13.1s
Cisco IOS XE Software	=3.13.2as
Cisco IOS XE Software	=3.13.2s
Cisco IOS XE Software	=3.13.3s
Cisco IOS XE Software	=3.13.4s
Cisco IOS XE Software	=3.13.5as
Cisco IOS XE Software	=3.13.5s
Cisco IOS XE Software	=3.13.6as
Cisco IOS XE Software	=3.13.6bs
Cisco IOS XE Software	=3.13.6s
Cisco IOS XE Software	=3.13.7as
Cisco IOS XE Software	=3.13.7s
Cisco IOS XE Software	=3.13.8s
Cisco IOS XE Software	=3.13.9s
Cisco IOS XE Software	=3.13.10s
Cisco IOS XE Software	=3.14.0s
Cisco IOS XE Software	=3.14.1s
Cisco IOS XE Software	=3.14.2s
Cisco IOS XE Software	=3.14.3s
Cisco IOS XE Software	=3.14.4s
Cisco IOS XE Software	=3.15.0s
Cisco IOS XE Software	=3.15.1cs
Cisco IOS XE Software	=3.15.1s
Cisco IOS XE Software	=3.15.1xbs
Cisco IOS XE Software	=3.15.2s
Cisco IOS XE Software	=3.15.3s
Cisco IOS XE Software	=3.15.4s
Cisco IOS XE Software	=3.16.0as
Cisco IOS XE Software	=3.16.0bs
Cisco IOS XE Software	=3.16.0cs
Cisco IOS XE Software	=3.16.0s
Cisco IOS XE Software	=3.16.1as
Cisco IOS XE Software	=3.16.1s
Cisco IOS XE Software	=3.16.2as
Cisco IOS XE Software	=3.16.2bs
Cisco IOS XE Software	=3.16.2s
Cisco IOS XE Software	=3.16.3as
Cisco IOS XE Software	=3.16.3s
Cisco IOS XE Software	=3.16.4as
Cisco IOS XE Software	=3.16.4bs
Cisco IOS XE Software	=3.16.4cs
Cisco IOS XE Software	=3.16.4ds
Cisco IOS XE Software	=3.16.4es
Cisco IOS XE Software	=3.16.4gs
Cisco IOS XE Software	=3.16.4s
Cisco IOS XE Software	=3.16.5as
Cisco IOS XE Software	=3.16.5bs
Cisco IOS XE Software	=3.16.5s
Cisco IOS XE Software	=3.16.6bs
Cisco IOS XE Software	=3.16.6s
Cisco IOS XE Software	=3.16.7as
Cisco IOS XE Software	=3.16.7bs
Cisco IOS XE Software	=3.16.7s
Cisco IOS XE Software	=3.16.8s
Cisco IOS XE Software	=3.16.9s
Cisco IOS XE Software	=3.16.10as
Cisco IOS XE Software	=3.16.10bs
Cisco IOS XE Software	=3.16.10cs
Cisco IOS XE Software	=3.16.10s
Cisco IOS XE Software	=3.17.0s
Cisco IOS XE Software	=3.17.1as
Cisco IOS XE Software	=3.17.1s
Cisco IOS XE Software	=3.17.2s
Cisco IOS XE Software	=3.17.3s
Cisco IOS XE Software	=3.17.4s
Cisco IOS XE Software	=3.18.0as
Cisco IOS XE Software	=3.18.0s
Cisco IOS XE Software	=3.18.0sp
Cisco IOS XE Software	=3.18.1asp
Cisco IOS XE Software	=3.18.1bsp
Cisco IOS XE Software	=3.18.1csp
Cisco IOS XE Software	=3.18.1gsp
Cisco IOS XE Software	=3.18.1hsp
Cisco IOS XE Software	=3.18.1isp
Cisco IOS XE Software	=3.18.1s
Cisco IOS XE Software	=3.18.1sp
Cisco IOS XE Software	=3.18.2asp
Cisco IOS XE Software	=3.18.2s
Cisco IOS XE Software	=3.18.2sp
Cisco IOS XE Software	=3.18.3asp
Cisco IOS XE Software	=3.18.3bsp
Cisco IOS XE Software	=3.18.3s
Cisco IOS XE Software	=3.18.3sp
Cisco IOS XE Software	=3.18.4s
Cisco IOS XE Software	=3.18.4sp
Cisco IOS XE Software	=3.18.5sp
Cisco IOS XE Software	=3.18.6sp
Cisco IOS XE Software	=3.18.7sp
Cisco IOS XE Software	=3.18.8asp
Cisco IOS XE Software	=3.18.8sp
Cisco IOS XE Software	=3.18.9sp
Cisco IOS XE Software	=3.18.10sp
Cisco IOS XE Software	=16.1.1
Cisco IOS XE Software	=16.1.2
Cisco IOS XE Software	=16.1.3
Cisco IOS XE Software	=16.2.1
Cisco IOS XE Software	=16.2.2
Cisco IOS XE Software	=16.3.1
Cisco IOS XE Software	=16.3.1a
Cisco IOS XE Software	=16.3.2
Cisco IOS XE Software	=16.3.3
Cisco IOS XE Software	=16.3.4
Cisco IOS XE Software	=16.3.5
Cisco IOS XE Software	=16.3.5b
Cisco IOS XE Software	=16.3.6
Cisco IOS XE Software	=16.3.7
Cisco IOS XE Software	=16.3.8
Cisco IOS XE Software	=16.3.9
Cisco IOS XE Software	=16.3.10
Cisco IOS XE Software	=16.3.11
Cisco IOS XE Software	=16.4.1
Cisco IOS XE Software	=16.4.2
Cisco IOS XE Software	=16.4.3
Cisco IOS XE Software	=16.5.1
Cisco IOS XE Software	=16.5.1a
Cisco IOS XE Software	=16.5.1b
Cisco IOS XE Software	=16.5.2
Cisco IOS XE Software	=16.5.3
Cisco IOS XE Software	=16.6.1
Cisco IOS XE Software	=16.6.2
Cisco IOS XE Software	=16.6.3
Cisco IOS XE Software	=16.6.4
Cisco IOS XE Software	=16.6.4a
Cisco IOS XE Software	=16.6.4s
Cisco IOS XE Software	=16.6.5
Cisco IOS XE Software	=16.6.5a
Cisco IOS XE Software	=16.6.5b
Cisco IOS XE Software	=16.6.6
Cisco IOS XE Software	=16.6.7
Cisco IOS XE Software	=16.6.7a
Cisco IOS XE Software	=16.6.8
Cisco IOS XE Software	=16.6.9
Cisco IOS XE Software	=16.6.10
Cisco IOS XE Software	=16.7.1
Cisco IOS XE Software	=16.7.1a
Cisco IOS XE Software	=16.7.1b
Cisco IOS XE Software	=16.7.2
Cisco IOS XE Software	=16.7.3
Cisco IOS XE Software	=16.7.4
Cisco IOS XE Software	=16.8.1
Cisco IOS XE Software	=16.8.1a
Cisco IOS XE Software	=16.8.1b
Cisco IOS XE Software	=16.8.1c
Cisco IOS XE Software	=16.8.1d
Cisco IOS XE Software	=16.8.1e
Cisco IOS XE Software	=16.8.1s
Cisco IOS XE Software	=16.8.2
Cisco IOS XE Software	=16.8.3
Cisco IOS XE Software	=16.9.1
Cisco IOS XE Software	=16.9.1a
Cisco IOS XE Software	=16.9.1b
Cisco IOS XE Software	=16.9.1c
Cisco IOS XE Software	=16.9.1d
Cisco IOS XE Software	=16.9.1s
Cisco IOS XE Software	=16.9.2
Cisco IOS XE Software	=16.9.2a
Cisco IOS XE Software	=16.9.2s
Cisco IOS XE Software	=16.9.3
Cisco IOS XE Software	=16.9.3a
Cisco IOS XE Software	=16.9.3h
Cisco IOS XE Software	=16.9.3s
Cisco IOS XE Software	=16.9.4
Cisco IOS XE Software	=16.9.4c
Cisco IOS XE Software	=16.9.5
Cisco IOS XE Software	=16.9.5f
Cisco IOS XE Software	=16.9.6
Cisco IOS XE Software	=16.9.7
Cisco IOS XE Software	=16.9.8
Cisco IOS XE Software	=16.10.1
Cisco IOS XE Software	=16.10.1a
Cisco IOS XE Software	=16.10.1b
Cisco IOS XE Software	=16.10.1c
Cisco IOS XE Software	=16.10.1d
Cisco IOS XE Software	=16.10.1e
Cisco IOS XE Software	=16.10.1f
Cisco IOS XE Software	=16.10.1g
Cisco IOS XE Software	=16.10.1s
Cisco IOS XE Software	=16.10.2
Cisco IOS XE Software	=16.10.3
Cisco IOS XE Software	=17.6.1w

Never miss a vulnerability like this again

Reference Links

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-rpki-dos-2EgCNeKE

Frequently Asked Questions

What is the severity of CVE-2022-20694?
CVE-2022-20694 has been classified with a high severity level due to its potential to cause a denial of service.
How do I fix CVE-2022-20694?
To mitigate CVE-2022-20694, users should upgrade to a fixed version of Cisco IOS XE software as specified in Cisco's advisory.
What causes CVE-2022-20694?
CVE-2022-20694 is caused by improper handling of specifically crafted requests in the Resource Public Key Infrastructure (RPKI) feature.
Which Cisco IOS XE versions are affected by CVE-2022-20694?
CVE-2022-20694 affects multiple versions of Cisco IOS XE, including 3.7.0bs, 3.10.10s, and various others as listed in the advisory.
Can CVE-2022-20694 be exploited remotely?
Yes, CVE-2022-20694 can be exploited by an unauthenticated, remote attacker, potentially leading to a DoS condition.

agent/type
agent/author
agent/references
agent/weakness
agent/severity
agent/title
agent/description
agent/first-publish-date
agent/event
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/tags
agent/softwarecombine
collector/nvd-index
agent/software-canonical-lookup-request
vendor/cisco
canonical/cisco ios xe
version/cisco ios xe/3.7.0bs
version/cisco ios xe/3.7.0s
version/cisco ios xe/3.7.0xas
version/cisco ios xe/3.7.0xbs
version/cisco ios xe/3.7.1as
version/cisco ios xe/3.7.1s
version/cisco ios xe/3.7.2s
version/cisco ios xe/3.7.2ts
version/cisco ios xe/3.7.3s
version/cisco ios xe/3.7.4as
version/cisco ios xe/3.7.4s
version/cisco ios xe/3.7.5s
version/cisco ios xe/3.7.6s
version/cisco ios xe/3.7.7s
version/cisco ios xe/3.7.8s
version/cisco ios xe/3.8.0s
version/cisco ios xe/3.8.1s
version/cisco ios xe/3.8.2s
version/cisco ios xe/3.9.0as
version/cisco ios xe/3.9.0s
version/cisco ios xe/3.9.0xas
version/cisco ios xe/3.9.1as
version/cisco ios xe/3.9.1s
version/cisco ios xe/3.9.2s
version/cisco ios xe/3.10.0s
version/cisco ios xe/3.10.1s
version/cisco ios xe/3.10.1xbs
version/cisco ios xe/3.10.1xcs
version/cisco ios xe/3.10.2as
version/cisco ios xe/3.10.2s
version/cisco ios xe/3.10.2ts
version/cisco ios xe/3.10.3s
version/cisco ios xe/3.10.4s
version/cisco ios xe/3.10.5s
version/cisco ios xe/3.10.6s
version/cisco ios xe/3.10.7s
version/cisco ios xe/3.10.8as
version/cisco ios xe/3.10.8s
version/cisco ios xe/3.10.9s
version/cisco ios xe/3.10.10s
version/cisco ios xe/3.11.0s
version/cisco ios xe/3.11.1s
version/cisco ios xe/3.11.2s
version/cisco ios xe/3.11.3s
version/cisco ios xe/3.11.4s
version/cisco ios xe/3.11.5e
version/cisco ios xe/3.12.0as
version/cisco ios xe/3.12.0s
version/cisco ios xe/3.12.1s
version/cisco ios xe/3.12.2s
version/cisco ios xe/3.12.3s
version/cisco ios xe/3.12.4s
version/cisco ios xe/3.13.0as
version/cisco ios xe/3.13.0s
version/cisco ios xe/3.13.1s
version/cisco ios xe/3.13.2as
version/cisco ios xe/3.13.2s
version/cisco ios xe/3.13.3s
version/cisco ios xe/3.13.4s
version/cisco ios xe/3.13.5as
version/cisco ios xe/3.13.5s
version/cisco ios xe/3.13.6as
version/cisco ios xe/3.13.6bs
version/cisco ios xe/3.13.6s
version/cisco ios xe/3.13.7as
version/cisco ios xe/3.13.7s
version/cisco ios xe/3.13.8s
version/cisco ios xe/3.13.9s
version/cisco ios xe/3.13.10s
version/cisco ios xe/3.14.0s
version/cisco ios xe/3.14.1s
version/cisco ios xe/3.14.2s
version/cisco ios xe/3.14.3s
version/cisco ios xe/3.14.4s
version/cisco ios xe/3.15.0s
version/cisco ios xe/3.15.1cs
version/cisco ios xe/3.15.1s
version/cisco ios xe/3.15.1xbs
version/cisco ios xe/3.15.2s
version/cisco ios xe/3.15.3s
version/cisco ios xe/3.15.4s
version/cisco ios xe/3.16.0as
version/cisco ios xe/3.16.0bs
version/cisco ios xe/3.16.0cs
version/cisco ios xe/3.16.0s
version/cisco ios xe/3.16.1as
version/cisco ios xe/3.16.1s
version/cisco ios xe/3.16.2as
version/cisco ios xe/3.16.2bs
version/cisco ios xe/3.16.2s
version/cisco ios xe/3.16.3as
version/cisco ios xe/3.16.3s
version/cisco ios xe/3.16.4as
version/cisco ios xe/3.16.4bs
version/cisco ios xe/3.16.4cs
version/cisco ios xe/3.16.4ds
version/cisco ios xe/3.16.4es
version/cisco ios xe/3.16.4gs
version/cisco ios xe/3.16.4s
version/cisco ios xe/3.16.5as
version/cisco ios xe/3.16.5bs
version/cisco ios xe/3.16.5s
version/cisco ios xe/3.16.6bs
version/cisco ios xe/3.16.6s
version/cisco ios xe/3.16.7as
version/cisco ios xe/3.16.7bs
version/cisco ios xe/3.16.7s
version/cisco ios xe/3.16.8s
version/cisco ios xe/3.16.9s
version/cisco ios xe/3.16.10as
version/cisco ios xe/3.16.10bs
version/cisco ios xe/3.16.10cs
version/cisco ios xe/3.16.10s
version/cisco ios xe/3.17.0s
version/cisco ios xe/3.17.1as
version/cisco ios xe/3.17.1s
version/cisco ios xe/3.17.2s
version/cisco ios xe/3.17.3s
version/cisco ios xe/3.17.4s
version/cisco ios xe/3.18.0as
version/cisco ios xe/3.18.0s
version/cisco ios xe/3.18.0sp
version/cisco ios xe/3.18.1asp
version/cisco ios xe/3.18.1bsp
version/cisco ios xe/3.18.1csp
version/cisco ios xe/3.18.1gsp
version/cisco ios xe/3.18.1hsp
version/cisco ios xe/3.18.1isp
version/cisco ios xe/3.18.1s
version/cisco ios xe/3.18.1sp
version/cisco ios xe/3.18.2asp
version/cisco ios xe/3.18.2s
version/cisco ios xe/3.18.2sp
version/cisco ios xe/3.18.3asp
version/cisco ios xe/3.18.3bsp
version/cisco ios xe/3.18.3s
version/cisco ios xe/3.18.3sp
version/cisco ios xe/3.18.4s
version/cisco ios xe/3.18.4sp
version/cisco ios xe/3.18.5sp
version/cisco ios xe/3.18.6sp
version/cisco ios xe/3.18.7sp
version/cisco ios xe/3.18.8asp
version/cisco ios xe/3.18.8sp
version/cisco ios xe/3.18.9sp
version/cisco ios xe/3.18.10sp
version/cisco ios xe/16.1.1
version/cisco ios xe/16.1.2
version/cisco ios xe/16.1.3
version/cisco ios xe/16.2.1
version/cisco ios xe/16.2.2
version/cisco ios xe/16.3.1
version/cisco ios xe/16.3.1a
version/cisco ios xe/16.3.2
version/cisco ios xe/16.3.3
version/cisco ios xe/16.3.4
version/cisco ios xe/16.3.5
version/cisco ios xe/16.3.5b
version/cisco ios xe/16.3.6
version/cisco ios xe/16.3.7
version/cisco ios xe/16.3.8
version/cisco ios xe/16.3.9
version/cisco ios xe/16.3.10
version/cisco ios xe/16.3.11
version/cisco ios xe/16.4.1
version/cisco ios xe/16.4.2
version/cisco ios xe/16.4.3
version/cisco ios xe/16.5.1
version/cisco ios xe/16.5.1a
version/cisco ios xe/16.5.1b
version/cisco ios xe/16.5.2
version/cisco ios xe/16.5.3
version/cisco ios xe/16.6.1
version/cisco ios xe/16.6.2
version/cisco ios xe/16.6.3
version/cisco ios xe/16.6.4
version/cisco ios xe/16.6.4a
version/cisco ios xe/16.6.4s
version/cisco ios xe/16.6.5
version/cisco ios xe/16.6.5a
version/cisco ios xe/16.6.5b
version/cisco ios xe/16.6.6
version/cisco ios xe/16.6.7
version/cisco ios xe/16.6.7a
version/cisco ios xe/16.6.8
version/cisco ios xe/16.6.9
version/cisco ios xe/16.6.10
version/cisco ios xe/16.7.1
version/cisco ios xe/16.7.1a
version/cisco ios xe/16.7.1b
version/cisco ios xe/16.7.2
version/cisco ios xe/16.7.3
version/cisco ios xe/16.7.4
version/cisco ios xe/16.8.1
version/cisco ios xe/16.8.1a
version/cisco ios xe/16.8.1b
version/cisco ios xe/16.8.1c
version/cisco ios xe/16.8.1d
version/cisco ios xe/16.8.1e
version/cisco ios xe/16.8.1s
version/cisco ios xe/16.8.2
version/cisco ios xe/16.8.3
version/cisco ios xe/16.9.1
version/cisco ios xe/16.9.1a
version/cisco ios xe/16.9.1b
version/cisco ios xe/16.9.1c
version/cisco ios xe/16.9.1d
version/cisco ios xe/16.9.1s
version/cisco ios xe/16.9.2
version/cisco ios xe/16.9.2a
version/cisco ios xe/16.9.2s
version/cisco ios xe/16.9.3
version/cisco ios xe/16.9.3a
version/cisco ios xe/16.9.3h
version/cisco ios xe/16.9.3s
version/cisco ios xe/16.9.4
version/cisco ios xe/16.9.4c
version/cisco ios xe/16.9.5
version/cisco ios xe/16.9.5f
version/cisco ios xe/16.9.6
version/cisco ios xe/16.9.7
version/cisco ios xe/16.9.8
version/cisco ios xe/16.10.1
version/cisco ios xe/16.10.1a
version/cisco ios xe/16.10.1b
version/cisco ios xe/16.10.1c
version/cisco ios xe/16.10.1d
version/cisco ios xe/16.10.1e
version/cisco ios xe/16.10.1f
version/cisco ios xe/16.10.1g
version/cisco ios xe/16.10.1s
version/cisco ios xe/16.10.2
version/cisco ios xe/16.10.3
version/cisco ios xe/17.6.1w