CVE-2022-20622

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability in IP ingress packet processing of the Cisco Embedded Wireless Controller with Catalyst Access Points Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service (DoS) condition. The device may experience a performance degradation in traffic processing or high CPU usage prior to the unexpected reload. This vulnerability is due to improper rate limiting of IP packets to the management interface. An attacker could exploit this vulnerability by sending a steady stream of IP traffic at a high rate to the management interface of the affected device. A successful exploit could allow the attacker to cause the device to reload.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Apr 15, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-206237.5A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 SeriesCVE-2022-206247.5A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attackeCVE-2022-206254.3A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjaCVE-2022-206265.4A vulnerability in the web-based management interface of Cisco Prime Access Registrar Appliance could allow an authenticated, remote atCVE-2022-206275.4Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticaCVE-2022-206285.4Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticaCVE-2022-206295.4Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticaCVE-2022-20638.8Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+.CVE-2022-206304.4A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive information in clear texCVE-2022-206316.1A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS atCVE-2022-206326.1A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS atCVE-2022-206335.3A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to perform a usernam
CVE-2022-20622: High severity, CVSS 7.5 | Vulnix