CVE-2022-20717: Cisco SD-WAN vEdge Routers Denial of Service Vulnerability
A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cause an affected device to run out of memory, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient memory management when an affected device receives large amounts of traffic. An attacker could exploit this vulnerability by sending malicious traffic to an affected device. A successful exploit could allow the attacker to cause the device to crash, resulting in a DoS condition.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-20717?
CVE-2022-20717 is a vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers that could allow an authenticated, local attacker to cause a denial of service (DoS) condition.
What is the severity level of CVE-2022-20717?
CVE-2022-20717 has a severity level of 5.5 (Medium).
Which devices are affected by CVE-2022-20717?
Cisco SD-WAN vEdge Routers versions 20.6 and 20.7 are affected by CVE-2022-20717.
How does CVE-2022-20717 work?
CVE-2022-20717 is due to insufficient memory management in the NETCONF process, allowing an attacker to exhaust the device's memory and cause a denial of service.
Is there a fix or patch available for CVE-2022-20717?
Yes, Cisco has released a security advisory with mitigation details and software updates to address CVE-2022-20717. Please refer to the Cisco Security Advisory for more information.