CVE-2022-20821
Cisco IOS XR Open Port Vulnerability
Why this priority
?
Generic watch priority computed by public, versioned rules. It does not know your assets. See the glossary
- Présent dans le catalogue CISA KEV (exploitation confirmée)
Description
Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open port and allow access to the Redis instance that is running within the NOSi container.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco IOS XR Software |
|
| Cisco | IOS XR | All versions |
Revision history
Revision 3
Revision 2
Update : Affected versions changed
Revision 1
New record
Qualification
- CVSS severity
?
Technical severity score between 0 and 10, with its version (3.1, 4.0). See the glossary
- 6.5 MEDIUM CVSS v3.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- KEV catalog
?
CISA catalog of vulnerabilities with confirmed exploitation. Absence from the catalog does not prove absence of exploitation. See the glossary
- Listed
- Exploitation
- Confirmed
- EPSS probability
?
Probability, between 0 and 1, that a vulnerability is exploited in the next 30 days, published daily by FIRST. Always dated. See the glossary
- Unknown
- Confidence
?
Quality of the sources behind the record. It is not a risk score. See the glossary
- High
Priority rules, version 1
CISA KEV catalog
- Added on
- 23 May 2022
- Federal due date
- 13 June 2022
- Required action
- Apply updates per vendor instructions.
- Ransomware use
- Unknown
Record
- Published on
- 26 May 2022
- Weaknesses (CWE)
- CWE-200, CWE-923
Sources
- Source : CISA Known Exploited Vulnerabilities Catalog Terms of use
- Source : CVE Program, cve.org Terms of use