CVE-2022-20821 — Cisco IOS XR Open Port Vulnerability

provenance: imported · CVE: CVE-2022-20821

CVE-2022-20821: Cisco IOS XR Open Port Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Cisco
Product	IOS XR
Date added	2022-05-23
Due date	2022-06-13
Ransomware campaign use	Unknown

Description

Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open port and allow access to the Redis instance that is running within the NOSi container.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2022-20821

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-20821
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog