Read the docs
TI-2022-05256 Aliases CVE-2022-20697GHSA-hhh3-rvr9-x6qq

Cisco IOS and IOS XE Software Web Services Denial of Service Vulnerability

Priority MEDIUM 46CWE-691Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-772.

Summary

A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper resource management in the HTTP server code. An attacker could exploit this vulnerability by sending a large number of HTTP requests to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01155 67th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoCisco IOSall versions—No fix listedCNA
  • Cisco IOS VendorCisco Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 29

CPEVersionsRoleVendor
cpe:2.3:o:cisco:ios:15.1\(3\)svr1:*:*:*:*:*:*:*15.1(3)svr1VulnerableCisco
cpe:2.3:o:cisco:ios:15.1\(3\)svr2:*:*:*:*:*:*:*15.1(3)svr2VulnerableCisco
cpe:2.3:o:cisco:ios:15.1\(3\)svr3:*:*:*:*:*:*:*15.1(3)svr3VulnerableCisco
cpe:2.3:o:cisco:ios:15.1\(3\)svs:*:*:*:*:*:*:*15.1(3)svsVulnerableCisco
cpe:2.3:o:cisco:ios:15.1\(3\)svs1:*:*:*:*:*:*:*15.1(3)svs1VulnerableCisco
cpe:2.3:o:cisco:ios:15.1\(3\)svt1:*:*:*:*:*:*:*15.1(3)svt1VulnerableCisco
cpe:2.3:o:cisco:ios:15.1\(3\)svt2:*:*:*:*:*:*:*15.1(3)svt2VulnerableCisco
cpe:2.3:o:cisco:ios:15.1\(3\)svt3:*:*:*:*:*:*:*15.1(3)svt3VulnerableCisco
cpe:2.3:o:cisco:ios:15.1\(3\)svu1:*:*:*:*:*:*:*15.1(3)svu1VulnerableCisco
cpe:2.3:o:cisco:ios:15.1\(3\)svu2:*:*:*:*:*:*:*15.1(3)svu2VulnerableCisco
  • cpe:2.3:o:cisco:ios:15.1\(3\)svr1:*:*:*:*:*:*:* Versions 15.1(3)svr1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.1\(3\)svr2:*:*:*:*:*:*:* Versions 15.1(3)svr2 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.1\(3\)svr3:*:*:*:*:*:*:* Versions 15.1(3)svr3 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.1\(3\)svs:*:*:*:*:*:*:* Versions 15.1(3)svs Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.1\(3\)svs1:*:*:*:*:*:*:* Versions 15.1(3)svs1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.1\(3\)svt1:*:*:*:*:*:*:* Versions 15.1(3)svt1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.1\(3\)svt2:*:*:*:*:*:*:* Versions 15.1(3)svt2 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.1\(3\)svt3:*:*:*:*:*:*:* Versions 15.1(3)svt3 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.1\(3\)svu1:*:*:*:*:*:*:* Versions 15.1(3)svu1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.1\(3\)svu2:*:*:*:*:*:*:* Versions 15.1(3)svu2 Vulnerable ·Cisco
Show 19 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:cisco:ios:15.1\(3\)svu10:*:*:*:*:*:*:*15.1(3)svu10VulnerableCisco
cpe:2.3:o:cisco:ios:15.1\(3\)svv1:*:*:*:*:*:*:*15.1(3)svv1VulnerableCisco
cpe:2.3:o:cisco:ios:15.2\(7\)e3:*:*:*:*:*:*:*15.2(7)e3VulnerableCisco
cpe:2.3:o:cisco:ios:15.2\(7\)e3a:*:*:*:*:*:*:*15.2(7)e3aVulnerableCisco
cpe:2.3:o:cisco:ios:15.2\(7\)e3k:*:*:*:*:*:*:*15.2(7)e3kVulnerableCisco
cpe:2.3:o:cisco:ios:15.2\(7\)e4:*:*:*:*:*:*:*15.2(7)e4VulnerableCisco
cpe:2.3:o:cisco:ios:15.2\(8\)e:*:*:*:*:*:*:*15.2(8)eVulnerableCisco
cpe:2.3:o:cisco:ios:15.2\(234k\)e:*:*:*:*:*:*:*15.2(234k)eVulnerableCisco
cpe:2.3:o:cisco:ios:15.3\(3\)jk100:*:*:*:*:*:*:*15.3(3)jk100VulnerableCisco
cpe:2.3:o:cisco:ios:15.3\(3\)jpj8:*:*:*:*:*:*:*15.3(3)jpj8VulnerableCisco
cpe:2.3:o:cisco:ios:15.9\(3\)m2:*:*:*:*:*:*:*15.9(3)m2VulnerableCisco
cpe:2.3:o:cisco:ios:15.9\(3\)m2a:*:*:*:*:*:*:*15.9(3)m2aVulnerableCisco
cpe:2.3:o:cisco:ios:15.9\(3\)m3:*:*:*:*:*:*:*15.9(3)m3VulnerableCisco
cpe:2.3:o:cisco:ios:15.9\(3\)m3a:*:*:*:*:*:*:*15.9(3)m3aVulnerableCisco
cpe:2.3:o:cisco:ios:15.9\(3\)m3b:*:*:*:*:*:*:*15.9(3)m3bVulnerableCisco
cpe:2.3:o:cisco:ios:15.9\(3\)m4:*:*:*:*:*:*:*15.9(3)m4VulnerableCisco
cpe:2.3:o:cisco:ios_xe:3.11.3ae:*:*:*:*:*:*:*3.11.3aeVulnerableCisco
cpe:2.3:o:cisco:ios_xe:3.11.3e:*:*:*:*:*:*:*3.11.3eVulnerableCisco
cpe:2.3:o:cisco:ios_xe:3.11.4e:*:*:*:*:*:*:*3.11.4eVulnerableCisco
  • cpe:2.3:o:cisco:ios:15.1\(3\)svu10:*:*:*:*:*:*:* Versions 15.1(3)svu10 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.1\(3\)svv1:*:*:*:*:*:*:* Versions 15.1(3)svv1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.2\(7\)e3:*:*:*:*:*:*:* Versions 15.2(7)e3 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.2\(7\)e3a:*:*:*:*:*:*:* Versions 15.2(7)e3a Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.2\(7\)e3k:*:*:*:*:*:*:* Versions 15.2(7)e3k Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.2\(7\)e4:*:*:*:*:*:*:* Versions 15.2(7)e4 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.2\(8\)e:*:*:*:*:*:*:* Versions 15.2(8)e Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.2\(234k\)e:*:*:*:*:*:*:* Versions 15.2(234k)e Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.3\(3\)jk100:*:*:*:*:*:*:* Versions 15.3(3)jk100 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.3\(3\)jpj8:*:*:*:*:*:*:* Versions 15.3(3)jpj8 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.9\(3\)m2:*:*:*:*:*:*:* Versions 15.9(3)m2 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.9\(3\)m2a:*:*:*:*:*:*:* Versions 15.9(3)m2a Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.9\(3\)m3:*:*:*:*:*:*:* Versions 15.9(3)m3 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.9\(3\)m3a:*:*:*:*:*:*:* Versions 15.9(3)m3a Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.9\(3\)m3b:*:*:*:*:*:*:* Versions 15.9(3)m3b Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.9\(3\)m4:*:*:*:*:*:*:* Versions 15.9(3)m4 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios_xe:3.11.3ae:*:*:*:*:*:*:* Versions 3.11.3ae Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios_xe:3.11.3e:*:*:*:*:*:*:* Versions 3.11.3e Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios_xe:3.11.4e:*:*:*:*:*:*:* Versions 3.11.4e Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-20697
  2. 2026-10-03 Alias added: GHSA-hhh3-rvr9-x6qq

References

Advisory 1

  • TI-2018-00138 Improper input validation in Cisco IOS and IOS XE KEVCVSS 3.1CRITICAL 9.8
  • TI-2017-09019 Improper input validation in Cisco IOS and IOS XE KEVCVSS 3.1CRITICAL 9.8
  • TI-2017-02977 Improper input validation in Cisco IOS and IOS XE Software KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-00135 Memory corruption in Cisco IOS, IOS XE, and IOS XR KEVCVSS 3.1HIGH 8.8
  • TI-2017-04499 Memory corruption in Cisco IOS KEVCVSS 3.1HIGH 8.8
  • TI-2017-04498 Memory corruption in Cisco IOS KEVCVSS 3.1HIGH 8.8
See all 617 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences