CVE-2022-20915 is a denial-of-service vulnerability in Cisco IOS XE Software, specifically impacting devices configured with IPv6 VPN over MPLS (6VPE) and Zone-Based Firewall (ZBFW). An unauthenticated, adjacent attacker can trigger a device reload by sending a crafted IPv6 packet through an affected interface. This vulnerability has a CVSS score of 7.4 (High), indicating a low attack complexity and high impact on availability, with no confidentiality or integrity impact. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.