CVE-2022-20821: Cisco IOS XR Open Port Vulnerability
First published: Mon May 23 2022(Updated: )
Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open port and allow access to the Redis instance that is running within the NOSi container.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XR | ||
| Cisco 8201 | ||
| Cisco 8202 | ||
| Cisco 8208 | ||
| Cisco 8212 | ||
| Cisco 8218 | ||
| Cisco Ncs-55a1-24h | ||
| Cisco Ncs-55a1-24q6h-s | ||
| Cisco Ncs-55a1-36h-s | ||
| Cisco Ncs-55a1-36h-se | ||
| Cisco Ncs-55a1-36h-se-s | ||
| Cisco Ncs-55a2-mod-hd-s | ||
| Cisco Ncs-55a2-mod-hx-s | ||
| Cisco Ncs-55a2-mod-s | ||
| Cisco Ncs-55a2-mod-se-h-s | ||
| Cisco Ncs-55a2-mod-se-s | ||
| Cisco Ncs 1001 | ||
| Cisco Ncs 1002 | ||
| Cisco Ncs 1004 | ||
| Cisco Ncs 5001 | ||
| Cisco Ncs 5002 | ||
| Cisco Ncs 5501-se | ||
| Cisco Ncs 5502-se | ||
| Cisco Ncs 5504 | ||
| Cisco Ncs 5508 | ||
| Cisco Ncs 5516 | ||
| Cisco Ncs 55a1 | ||
| Cisco Ncs 55a2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for the Cisco IOS XR Open Port Vulnerability?
The vulnerability ID for the Cisco IOS XR Open Port Vulnerability is CVE-2022-20821.
What is the severity of CVE-2022-20821?
The severity of CVE-2022-20821 is medium, with a severity value of 6.5.
How does the vulnerability in Cisco IOS XR Software occur?
The vulnerability occurs because the health check RPM of Cisco IOS XR Software opens TCP port 6379 by default upon activation.
What is the impact of the Cisco IOS XR Open Port Vulnerability?
The vulnerability allows an unauthenticated, remote attacker to access the Redis instance running within the NOSi container.
How can I fix the Cisco IOS XR Open Port Vulnerability?
It is recommended to apply the necessary updates or patches provided by Cisco to mitigate the vulnerability.
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- agent/weakness
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- collector/nvd-index
- vendor/cisco
- canonical/cisco ios xr
- canonical/cisco 8201
- canonical/cisco 8202
- canonical/cisco 8208
- canonical/cisco 8212
- canonical/cisco 8218
- canonical/cisco ncs-55a1-24h
- canonical/cisco ncs-55a1-24q6h-s
- canonical/cisco ncs-55a1-36h-s
- canonical/cisco ncs-55a1-36h-se
- canonical/cisco ncs-55a1-36h-se-s
- canonical/cisco ncs-55a2-mod-hd-s
- canonical/cisco ncs-55a2-mod-hx-s
- canonical/cisco ncs-55a2-mod-s
- canonical/cisco ncs-55a2-mod-se-h-s
- canonical/cisco ncs-55a2-mod-se-s
- canonical/cisco ncs 1001
- canonical/cisco ncs 1002
- canonical/cisco ncs 1004
- canonical/cisco ncs 5001
- canonical/cisco ncs 5002
- canonical/cisco ncs 5501-se
- canonical/cisco ncs 5502-se
- canonical/cisco ncs 5504
- canonical/cisco ncs 5508
- canonical/cisco ncs 5516
- canonical/cisco ncs 55a1
- canonical/cisco ncs 55a2