{"id":"CVE-2022-20823","aliases":["EUVD-2022-26073","GHSA-g29q-52vq-fhwp"],"status":"published","title":"Cisco NX-OS Software OSPFv3 Denial of Service Vulnerability","description":"A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incomplete input validation of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending a malicious OSPFv3 link-state advertisement (LSA) to an affected device. A successful exploit could allow the attacker to cause the OSPFv3 process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition. Note: The OSPFv3 feature is disabled by default. To exploit this vulnerability, an attacker must be able to establish a full OSPFv3 neighbor state with an affected device. For more information about exploitation conditions, see the Details section of this advisory.","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01124,"percentile":0.66488,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125","CWE-126"],"published":"2022-08-25T18:40:30Z","modified":"2026-06-17T04:25:11Z","products":[{"vendor":"cisco","product":"cisco nx-os software"},{"vendor":"cisco","product":"nexus_3016_firmware"},{"vendor":"cisco","product":"nexus_3016q_firmware"},{"vendor":"cisco","product":"nexus_3048_firmware"},{"vendor":"cisco","product":"nexus_3064-32t_firmware"},{"vendor":"cisco","product":"nexus_3064-t_firmware"},{"vendor":"cisco","product":"nexus_3064-x_firmware"},{"vendor":"cisco","product":"nexus_3064_firmware"},{"vendor":"cisco","product":"nexus_3064t_firmware"},{"vendor":"cisco","product":"nexus_3064x_firmware"},{"vendor":"cisco","product":"nexus_3100-v_firmware"},{"vendor":"cisco","product":"nexus_3100-z_firmware"},{"vendor":"cisco","product":"nexus_3100_firmware"},{"vendor":"cisco","product":"nexus_3100v_firmware"},{"vendor":"cisco","product":"nexus_31108pc-v_firmware"},{"vendor":"cisco","product":"nexus_31108pv-v_firmware"},{"vendor":"cisco","product":"nexus_31108tc-v_firmware"},{"vendor":"cisco","product":"nexus_31128pq_firmware"},{"vendor":"cisco","product":"nexus_3132c-z_firmware"},{"vendor":"cisco","product":"nexus_3132q-v_firmware"},{"vendor":"cisco","product":"nexus_3132q-x\\/3132q-xl_firmware"},{"vendor":"cisco","product":"nexus_3132q-x_firmware"},{"vendor":"cisco","product":"nexus_3132q-xl_firmware"},{"vendor":"cisco","product":"nexus_3132q_firmware"},{"vendor":"cisco","product":"nexus_3164q_firmware"},{"vendor":"cisco","product":"nexus_3172_firmware"},{"vendor":"cisco","product":"nexus_3172pq-xl_firmware"},{"vendor":"cisco","product":"nexus_3172pq\\/pq-xl_firmware"},{"vendor":"cisco","product":"nexus_3172pq_firmware"},{"vendor":"cisco","product":"nexus_3172tq-32t_firmware"},{"vendor":"cisco","product":"nexus_3172tq-xl_firmware"},{"vendor":"cisco","product":"nexus_3172tq_firmware"},{"vendor":"cisco","product":"nexus_3200_firmware"},{"vendor":"cisco","product":"nexus_3232c__firmware"},{"vendor":"cisco","product":"nexus_3232c_firmware"},{"vendor":"cisco","product":"nexus_3264c-e_firmware"},{"vendor":"cisco","product":"nexus_3264q_firmware"},{"vendor":"cisco","product":"nexus_3400_firmware"},{"vendor":"cisco","product":"nexus_3408-s_firmware"},{"vendor":"cisco","product":"nexus_34180yc_firmware"},{"vendor":"cisco","product":"nexus_34200yc-sm_firmware"},{"vendor":"cisco","product":"nexus_3432d-s_firmware"},{"vendor":"cisco","product":"nexus_3464c_firmware"},{"vendor":"cisco","product":"nexus_3500_firmware"},{"vendor":"cisco","product":"nexus_3500_platform_firmware"},{"vendor":"cisco","product":"nexus_3524-x\\/xl_firmware"},{"vendor":"cisco","product":"nexus_3524-x_firmware"},{"vendor":"cisco","product":"nexus_3524-xl_firmware"},{"vendor":"cisco","product":"nexus_3524_firmware"},{"vendor":"cisco","product":"nexus_3548-x\\/xl_firmware"},{"vendor":"cisco","product":"nexus_3548-x_firmware"},{"vendor":"cisco","product":"nexus_3548-xl_firmware"},{"vendor":"cisco","product":"nexus_3548_firmware"},{"vendor":"cisco","product":"nexus_3600_firmware"},{"vendor":"cisco","product":"nexus_36180yc-r_firmware"},{"vendor":"cisco","product":"nexus_3636c-r_firmware"},{"vendor":"cisco","product":"nexus_5500_firmware"},{"vendor":"cisco","product":"nexus_5548p_firmware"},{"vendor":"cisco","product":"nexus_5548up_firmware"},{"vendor":"cisco","product":"nexus_5596t_firmware"},{"vendor":"cisco","product":"nexus_5596up_firmware"},{"vendor":"cisco","product":"nexus_5600_firmware"},{"vendor":"cisco","product":"nexus_56128p_firmware"},{"vendor":"cisco","product":"nexus_5624q_firmware"},{"vendor":"cisco","product":"nexus_5648q_firmware"},{"vendor":"cisco","product":"nexus_5672up-16g_firmware"},{"vendor":"cisco","product":"nexus_5672up_firmware"},{"vendor":"cisco","product":"nexus_5696q_firmware"},{"vendor":"cisco","product":"nexus_6000_firmware"},{"vendor":"cisco","product":"nexus_6001_firmware"},{"vendor":"cisco","product":"nexus_6001p_firmware"},{"vendor":"cisco","product":"nexus_6001t_firmware"},{"vendor":"cisco","product":"nexus_6004_firmware"},{"vendor":"cisco","product":"nexus_6004x_firmware"},{"vendor":"cisco","product":"nexus_7000_10-slot_firmware"},{"vendor":"cisco","product":"nexus_7000_18-slot_firmware"},{"vendor":"cisco","product":"nexus_7000_4-slot_firmware"},{"vendor":"cisco","product":"nexus_7000_9-slot_firmware"},{"vendor":"cisco","product":"nexus_7000_firmware"},{"vendor":"cisco","product":"nexus_7000_supervisor_1_firmware"},{"vendor":"cisco","product":"nexus_7000_supervisor_2_firmware"},{"vendor":"cisco","product":"nexus_7000_supervisor_2e_firmware"},{"vendor":"cisco","product":"nexus_7004_firmware"},{"vendor":"cisco","product":"nexus_7009_firmware"},{"vendor":"cisco","product":"nexus_7010_firmware"},{"vendor":"cisco","product":"nexus_7018_firmware"},{"vendor":"cisco","product":"nexus_7700_10-slot_firmware"},{"vendor":"cisco","product":"nexus_7700_18-slot_firmware"},{"vendor":"cisco","product":"nexus_7700_2-slot_firmware"},{"vendor":"cisco","product":"nexus_7700_6-slot_firmware"},{"vendor":"cisco","product":"nexus_7700_firmware"},{"vendor":"cisco","product":"nexus_7700_supervisor_2e_firmware"},{"vendor":"cisco","product":"nexus_7700_supervisor_3e_firmware"},{"vendor":"cisco","product":"nexus_7702_firmware"},{"vendor":"cisco","product":"nexus_7706_firmware"},{"vendor":"cisco","product":"nexus_7710_firmware"},{"vendor":"cisco","product":"nexus_7718_firmware"},{"vendor":"cisco","product":"nexus_9000_firmware"},{"vendor":"cisco","product":"nexus_9000v_firmware"},{"vendor":"cisco","product":"nexus_9200_firmware"},{"vendor":"cisco","product":"nexus_92160yc-x_firmware"},{"vendor":"cisco","product":"nexus_9221c_firmware"},{"vendor":"cisco","product":"nexus_92300yc_firmware"},{"vendor":"cisco","product":"nexus_92304qc_firmware"},{"vendor":"cisco","product":"nexus_92348gc-x_firmware"},{"vendor":"cisco","product":"nexus_9236c_firmware"},{"vendor":"cisco","product":"nexus_9272q_firmware"},{"vendor":"cisco","product":"nexus_9300_firmware"},{"vendor":"cisco","product":"nexus_93108tc-ex-24_firmware"},{"vendor":"cisco","product":"nexus_93108tc-ex_firmware"},{"vendor":"cisco","product":"nexus_93108tc-fx-24_firmware"},{"vendor":"cisco","product":"nexus_93108tc-fx3p_firmware"},{"vendor":"cisco","product":"nexus_93108tc-fx_firmware"},{"vendor":"cisco","product":"nexus_93120tx_firmware"},{"vendor":"cisco","product":"nexus_93128_firmware"},{"vendor":"cisco","product":"nexus_93128tx_firmware"},{"vendor":"cisco","product":"nexus_9316d-gx_firmware"},{"vendor":"cisco","product":"nexus_93180lc-ex_firmware"},{"vendor":"cisco","product":"nexus_93180tc-ex_firmware"},{"vendor":"cisco","product":"nexus_93180yc-ex-24_firmware"},{"vendor":"cisco","product":"nexus_93180yc-ex_firmware"},{"vendor":"cisco","product":"nexus_93180yc-fx-24_firmware"},{"vendor":"cisco","product":"nexus_93180yc-fx3_firmware"},{"vendor":"cisco","product":"nexus_93180yc-fx3s_firmware"},{"vendor":"cisco","product":"nexus_93180yc-fx_firmware"},{"vendor":"cisco","product":"nexus_93216tc-fx2_firmware"},{"vendor":"cisco","product":"nexus_93240yc-fx2_firmware"},{"vendor":"cisco","product":"nexus_9332c_firmware"},{"vendor":"cisco","product":"nexus_9332pq_firmware"},{"vendor":"cisco","product":"nexus_93360yc-fx2_firmware"},{"vendor":"cisco","product":"nexus_9336c-fx2-e_firmware"},{"vendor":"cisco","product":"nexus_9336c-fx2_firmware"},{"vendor":"cisco","product":"nexus_9336pq_firmware"},{"vendor":"cisco","product":"nexus_9348gc-fxp_firmware"},{"vendor":"cisco","product":"nexus_93600cd-gx_firmware"},{"vendor":"cisco","product":"nexus_9364c-gx_firmware"},{"vendor":"cisco","product":"nexus_9364c_firmware"},{"vendor":"cisco","product":"nexus_9372px-e_firmware"},{"vendor":"cisco","product":"nexus_9372px_firmware"},{"vendor":"cisco","product":"nexus_9372tx-e_firmware"},{"vendor":"cisco","product":"nexus_9372tx_firmware"},{"vendor":"cisco","product":"nexus_9396px_firmware"},{"vendor":"cisco","product":"nexus_9396tx_firmware"},{"vendor":"cisco","product":"nexus_9500_firmware"},{"vendor":"cisco","product":"nexus_9500r_firmware"},{"vendor":"cisco","product":"nexus_9504_firmware"},{"vendor":"cisco","product":"nexus_9508_firmware"},{"vendor":"cisco","product":"nexus_9516_firmware"}],"references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ospfv3-dos-48qutcu","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-20823"},{"url":"https://github.com/advisories/GHSA-g29q-52vq-fhwp"}],"sources":{"cve":[{"id":"CVE-2022-20823","title":"Cisco NX-OS Software OSPFv3 Denial of Service Vulnerability","description":"A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incomplete input validation of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending a malicious OSPFv3 link-state advertisement (LSA) to an affected device. A successful exploit could allow the attacker to cause the OSPFv3 process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition. Note: The OSPFv3 feature is disabled by default. To exploit this vulnerability, an attacker must be able to establish a full OSPFv3 neighbor state with an affected device. For more information about exploitation conditions, see the Details section of this advisory.","status":"published","published":"2022-08-25T18:40:30.942Z","modified":"2024-11-06T16:07:37.716Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-126"],"updated_at":"2026-11-02T14:34:24.234074Z"}],"euvd":[{"id":"EUVD-2022-26073","description":"A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incomplete input validation of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending a malicious OSPFv3 link-state advertisement (LSA) to an affected device. A successful exploit could allow the attacker to cause the OSPFv3 process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition. Note: The OSPFv3 feature is disabled by default. To exploit this vulnerability, an attacker must be able to establish a full OSPFv3 neighbor state with an affected device. For more information about exploitation conditions, see the Details section of this advisory.","status":"published","published":"2022-08-25T18:40:30Z","modified":"2024-11-06T16:07:37Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:05:10.085157Z"}],"ghsa":[{"id":"GHSA-g29q-52vq-fhwp","title":"A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an...","description":"A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incomplete input validation of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending a malicious OSPFv3 link-state advertisement (LSA) to an affected device. A successful exploit could allow the attacker to cause the OSPFv3 process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition. Note: The OSPFv3 feature is disabled by default. To exploit this vulnerability, an attacker must be able to establish a full OSPFv3 neighbor state with an affected device. For more information about exploitation conditions, see the Details section of this advisory.","status":"published","published":"2022-08-26T00:03:30Z","modified":"2023-01-30T05:01:39Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:46:27.385606Z"}],"nvd":[{"id":"CVE-2022-20823","description":"A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incomplete input validation of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending a malicious OSPFv3 link-state advertisement (LSA) to an affected device. A successful exploit could allow the attacker to cause the OSPFv3 process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition. Note: The OSPFv3 feature is disabled by default. To exploit this vulnerability, an attacker must be able to establish a full OSPFv3 neighbor state with an affected device. For more information about exploitation conditions, see the Details section of this advisory.","status":"published","published":"2022-08-25T19:15:08.147Z","modified":"2026-06-17T04:25:11.34Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-126","CWE-125"],"updated_at":"2026-11-02T14:07:25.883929Z"}]}}