What is CVE-2022-20846?

CVE-2022-20846 is a medium-severity vulnerability in Cisco Ios Xr Software, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 4.3/10. Published 2024-11-15.

How severe is CVE-2022-20846?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Buffer overflow in Cisco Ios Xr Software

CVE-2022-20846

A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the Cisco Discovery Protocol process to reload on an affected device. This…

Vulnerability class: Buffer Overflow

EPSS: 0.010 (57.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Cisco Ios Xr Software — versions 6.5.3, 6.5.29, 6.5.1
Cisco Ios_xr — versions 6.5.1, 6.5.2, 6.5.3

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

psirt@cisco.com (Vendor Advisory)
psirt@cisco.com (Not Applicable)
psirt@cisco.com (Not Applicable)

Frequently asked questions

What is CVE-2022-20846?: CVE-2022-20846 is a medium-severity vulnerability in Cisco Ios Xr Software, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 4.3/10. Published 2024-11-15.
How severe is CVE-2022-20846?: Medium severity. CVSS v3 base score is 4.3 out of 10.