CVE Watch—

CVE-2022-20821

Cisco IOS XR Open Port Vulnerability

CVSS

—

Sem CVSS

EPSS

11.5%

p96

KEV

SIM

23 de mai. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

11.5%EPSS · 30 dias11.5%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Cisco / IOS XR

Vulnerabilidade

Cisco IOS XR Open Port Vulnerability

Adicionado ao KEV

23 de mai. de 2022

Corrigir até

13 de jun. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open port and allow access to the Redis instance that is running within the NOSi container.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2022-20821

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2020-3118—

96.1%

KEV—79Cisco IOS XR Software Discovery Protocol Format String Vulnerability—CVE-2010-3035—

93.0%

KEV—78Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability—CVE-2020-3566—

89.8%

KEV—77Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability—CVE-2020-3569—

88.6%

KEV—77Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability—CVE-2009-2055—

88.6%

KEV—77Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability—