Vulnerabilities > CVE-2022-20870 - Unspecified vulnerability in Cisco IOS XE

CVSS 8.6 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

cisco

NVD

Published: 2022-10-10

Updated: 2023-11-07

Summary

A vulnerability in the egress MPLS packet processing function of Cisco IOS XE Software for Cisco Catalyst 3650, Catalyst 3850, and Catalyst 9000 Family Switches could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient input validation of IPv4 traffic. An attacker could exploit this vulnerability by sending a malformed packet out of an affected MPLS-enabled interface. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS XE -	1
Hardware	Cisco Cisco Catalyst 3650 - Cisco Catalyst 3650 12X48Fd E - Cisco Catalyst 3650 12X48Fd L - Cisco Catalyst 3650 12X48Fd S - Cisco Catalyst 3650 12X48Uq - Cisco Catalyst 3650 12X48Uq E - Cisco Catalyst 3650 12X48Uq L - Cisco Catalyst 3650 12X48Uq S - Cisco Catalyst 3650 12X48Ur - Cisco Catalyst 3650 12X48Ur E - Cisco Catalyst 3650 12X48Ur L - Cisco Catalyst 3650 12X48Ur S - Cisco Catalyst 3650 12X48Uz - Cisco Catalyst 3650 12X48Uz E - Cisco Catalyst 3650 12X48Uz L - Cisco Catalyst 3650 12X48Uz S - Cisco Catalyst 3650 24Pd - Cisco Catalyst 3650 24Pd E - Cisco Catalyst 3650 24Pd L - Cisco Catalyst 3650 24Pd S - Cisco Catalyst 3650 24Pdm - Cisco Catalyst 3650 24Pdm E - Cisco Catalyst 3650 24Pdm L - Cisco Catalyst 3650 24Pdm S - Cisco Catalyst 3650 24Ps E - Cisco Catalyst 3650 24Ps L - Cisco Catalyst 3650 24Ps S - Cisco Catalyst 3650 24Td E - Cisco Catalyst 3650 24Td L - Cisco Catalyst 3650 24Td S - Cisco Catalyst 3650 24Ts E - Cisco Catalyst 3650 24Ts L - Cisco Catalyst 3650 24Ts S - Cisco Catalyst 3650 48Fd E - Cisco Catalyst 3650 48Fd L - Cisco Catalyst 3650 48Fd S - Cisco Catalyst 3650 48Fq - Cisco Catalyst 3650 48Fq E - Cisco Catalyst 3650 48Fq L - Cisco Catalyst 3650 48Fq S - Cisco Catalyst 3650 48Fqm - Cisco Catalyst 3650 48Fqm E - Cisco Catalyst 3650 48Fqm L - Cisco Catalyst 3650 48Fqm S - Cisco Catalyst 3650 48Fs E - Cisco Catalyst 3650 48Fs L - Cisco Catalyst 3650 48Fs S - Cisco Catalyst 3650 48Pd E - Cisco Catalyst 3650 48Pd L - Cisco Catalyst 3650 48Pd S - Cisco Catalyst 3650 48Pq E - Cisco Catalyst 3650 48Pq L - Cisco Catalyst 3650 48Pq S - Cisco Catalyst 3650 48Ps E - Cisco Catalyst 3650 48Ps L - Cisco Catalyst 3650 48Ps S - Cisco Catalyst 3650 48Td E - Cisco Catalyst 3650 48Td L - Cisco Catalyst 3650 48Td S - Cisco Catalyst 3650 48Tq E - Cisco Catalyst 3650 48Tq L - Cisco Catalyst 3650 48Tq S - Cisco Catalyst 3650 48Ts E - Cisco Catalyst 3650 48Ts L - Cisco Catalyst 3650 48Ts S - Cisco Catalyst 3650 8X24Pd E - Cisco Catalyst 3650 8X24Pd L - Cisco Catalyst 3650 8X24Pd S - Cisco Catalyst 3650 8X24Uq - Cisco Catalyst 3650 8X24Uq E - Cisco Catalyst 3650 8X24Uq L - Cisco Catalyst 3650 8X24Uq S - Cisco Catalyst 3850 - Cisco Catalyst 3850 12S E - Cisco Catalyst 3850 12S S - Cisco Catalyst 3850 12X48U - Cisco Catalyst 3850 12Xs E - Cisco Catalyst 3850 12Xs S - Cisco Catalyst 3850 16Xs E - Cisco Catalyst 3850 16Xs S - Cisco Catalyst 3850 24P E - Cisco Catalyst 3850 24P L - Cisco Catalyst 3850 24P S - Cisco Catalyst 3850 24Pw S - Cisco Catalyst 3850 24S E - Cisco Catalyst 3850 24S S - Cisco Catalyst 3850 24T E - Cisco Catalyst 3850 24T L - Cisco Catalyst 3850 24T S - Cisco Catalyst 3850 24U - Cisco Catalyst 3850 24U E - Cisco Catalyst 3850 24U L - Cisco Catalyst 3850 24U S - Cisco Catalyst 3850 24Xs - Cisco Catalyst 3850 24Xs E - Cisco Catalyst 3850 24Xs S - Cisco Catalyst 3850 24Xu - Cisco Catalyst 3850 24Xu E - Cisco Catalyst 3850 24Xu L - Cisco Catalyst 3850 24Xu S - Cisco Catalyst 3850 32Xs E - Cisco Catalyst 3850 32Xs S - Cisco Catalyst 3850 48F E - Cisco Catalyst 3850 48F L - Cisco Catalyst 3850 48F S - Cisco Catalyst 3850 48P E - Cisco Catalyst 3850 48P L - Cisco Catalyst 3850 48P S - Cisco Catalyst 3850 48Pw S - Cisco Catalyst 3850 48T E - Cisco Catalyst 3850 48T L - Cisco Catalyst 3850 48T S - Cisco Catalyst 3850 48U - Cisco Catalyst 3850 48U E - Cisco Catalyst 3850 48U L - Cisco Catalyst 3850 48U S - Cisco Catalyst 3850 48Xs - Cisco Catalyst 3850 48Xs E - Cisco Catalyst 3850 48Xs F E - Cisco Catalyst 3850 48Xs F S - Cisco Catalyst 3850 48Xs S - Cisco Catalyst 3850 NM 2 40G - Cisco Catalyst 3850 NM 8 10G - Cisco Catalyst 9300 - Cisco Catalyst 9300 24P A - Cisco Catalyst 9300 24P E - Cisco Catalyst 9300 24S A - Cisco Catalyst 9300 24S E - Cisco Catalyst 9300 24T A - Cisco Catalyst 9300 24T E - Cisco Catalyst 9300 24U A - Cisco Catalyst 9300 24U E - Cisco Catalyst 9300 24Ux A - Cisco Catalyst 9300 24Ux E - Cisco Catalyst 9300 48P A - Cisco Catalyst 9300 48P E - Cisco Catalyst 9300 48S A - Cisco Catalyst 9300 48S E - Cisco Catalyst 9300 48T A - Cisco Catalyst 9300 48T E - Cisco Catalyst 9300 48U A - Cisco Catalyst 9300 48U E - Cisco Catalyst 9300 48Un A - Cisco Catalyst 9300 48Un E - Cisco Catalyst 9300 48Uxm A - Cisco Catalyst 9300 48Uxm E - Cisco Catalyst 9300L - Cisco Catalyst 9300L 24P 4G A - Cisco Catalyst 9300L 24P 4G E - Cisco Catalyst 9300L 24P 4X A - Cisco Catalyst 9300L 24P 4X E - Cisco Catalyst 9300L 24T 4G A - Cisco Catalyst 9300L 24T 4G E - Cisco Catalyst 9300L 24T 4X A - Cisco Catalyst 9300L 24T 4X E - Cisco Catalyst 9300L 48P 4G A - Cisco Catalyst 9300L 48P 4G E - Cisco Catalyst 9300L 48P 4X A - Cisco Catalyst 9300L 48P 4X E - Cisco Catalyst 9300L 48T 4G A - Cisco Catalyst 9300L 48T 4G E - Cisco Catalyst 9300L 48T 4X A - Cisco Catalyst 9300L 48T 4X E - Cisco Catalyst 9300Lm - Cisco Catalyst 9300X - Cisco Catalyst 9400 - Cisco Catalyst 9500 - Cisco Catalyst 9500H - Cisco Catalyst 9600 - Cisco Catalyst C3850 12X48U E - Cisco Catalyst C3850 12X48U L - Cisco Catalyst C3850 12X48U S - Cisco Catalyst C9500 12Q - Cisco Catalyst C9500 12Q A - Cisco Catalyst C9500 12Q E - Cisco Catalyst C9500 16X - Cisco Catalyst C9500 16X A - Cisco Catalyst C9500 16X E - Cisco Catalyst C9500 24Q - Cisco Catalyst C9500 24Q A - Cisco Catalyst C9500 24Q E - Cisco Catalyst C9500 24Y4C - Cisco Catalyst C9500 32C - Cisco Catalyst C9500 32Qc - Cisco Catalyst C9500 40X - Cisco Catalyst C9500 40X A - Cisco Catalyst C9500 40X E - Cisco Catalyst C9500 48Y4C - Cisco Catalyst C9600 LC 24C - Cisco Catalyst C9600 LC 48S - Cisco Catalyst C9600 LC 48Tx - Cisco Catalyst C9600 LC 48Yl -	192

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-mpls-dos-Ab4OUL3