CVE-2022-20625

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to restart, resulting in a denial of service (DoS) condition. This vulnerability is due to improper handling of Cisco Discovery Protocol messages that are processed by the Cisco Discovery Protocol service. An attacker could exploit this vulnerability by sending a series of malicious Cisco Discovery Protocol messages to an affected device. A successful exploit could allow the attacker to cause the Cisco Discovery Protocol service to fail and restart. In rare conditions, repeated failures of the process could occur, which could cause the entire device to restart.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Feb 23, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-206265.4A vulnerability in the web-based management interface of Cisco Prime Access Registrar Appliance could allow an authenticated, remote atCVE-2022-206275.4Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticaCVE-2022-206285.4Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticaCVE-2022-206295.4Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticaCVE-2022-20638.8Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+.CVE-2022-206304.4A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive information in clear texCVE-2022-206316.1A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS atCVE-2022-206326.1A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS atCVE-2022-206335.3A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to perform a usernamCVE-2022-206346.1A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to redirect a user tCVE-2022-206356.1Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to CVE-2022-206366.1Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to
CVE-2022-20625: Medium severity, CVSS 4.3 | Vulnix