6.5

CVE-2022-20922: cisco cisco cyber vision Heap Inspection

CVSS: 6.5v3.1MediumModified
Published 10-11-2022Last modified 03-08-2024
Open JSON

Vulnerability summary

CVE-2022-20922 is a medium (CVSS 6.5) Heap Inspection vulnerability in cisco cisco cyber vision. EPSS estimates a 0.85% chance of exploitation in the next 30 days, higher than 57.4% of scored vulnerabilities.

Overall risk
26/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.85%
0%100%
Low · +0.03 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 10-11-2022
    PublishedVulnerability first disclosed.
  2. 03-08-2024
    Last modifiedVulnerability information updated.

Description

Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the configured policies or cause a denial of service (DoS) condition on an affected device. These vulnerabilities are due to improper management of system resources when the Snort detection engine is processing SMB2 traffic. An attacker could exploit these vulnerabilities by sending a high rate of certain types of SMB2 packets through an affected device. A successful exploit could allow the attacker to trigger a reload of the Snort process, resulting in a DoS condition. Note: When the snort preserve-connection option is enabled for the Snort detection engine, a successful exploit could also allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network. The snort preserve-connection setting is enabled by default. See the Details ["#details"] section of this advisory for more information. Note: Only products that have Snort 3 configured are affected. Products that are configured with Snort 2 are not affected.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

0.85%

Chance of exploitation in the next 30 days

Percentile

57%

Versus all other CVEs

30-day change

+0.03 pp

From 0.82% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.85%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Cisco6 products
  • cisco cyber vision3.0.4 | 3.0.0 | 3.0.1 | 3.0.2 | 3.0.3 | 3.0.5 | 3.0.6 | 3.1.0 | 3.1.2 | 3.1.1 | 3.2.3 | 3.2.1 | 3.2.4 | 3.2.0 | 3.2.2 | 4.0.0 | 4.0.1 | 4.0.2 | 4.0.3 | 4.1.0 | 4.1.1
  • cisco firepower threat defense software7.1.0 | 7.1.0.1 | 7.1.0.2 | 7.2.0 | 7.2.0.1
  • cisco umbrella insights virtual appliance1.5.4 | 1.5.5 | 1.5.6 | 2.0.0 | 2.0.2 | 2.0.3 | 2.1.0 | 2.1.2 | 2.1.5 | 2.1.4 | 2.4.12 | 2.4.6 | 2.4 | 2.4.4 | 2.5 | 2.5.4 | 2.5.5 | 2.5.6 | 2.5.7 | 2.6.0 | 2.6.1 | 2.6.2 | 2.7 | 2.8 | 2.8.9 | 3.0 | 3.1 | 3.2 | 2.3.1 | 2.3 | 2.2 | 2.2.1
  • cyber_vision3.0.0 | 3.0.1 | 3.0.2 | 3.0.3 | 3.0.5 | 3.0.6 | 3.1.0 | 3.1.1 | 3.1.2 | 3.2.0 | 3.2.1 | 3.2.2 | 3.2.3 | 3.2.4 | 4.0.0 | 4.0.1 | 4.0.2 | 4.0.3 | 4.1.0 | 4.1.1
  • secure_firewall_threat_defense7.1.0 | 7.1.0.1 | 7.1.0.2 | 7.2.0 | 7.2.0.1

1 vendor · 6 products

References

1 links