Cisco NCS 4000 TL1 DoS Vulnerability (CVE-2022-20845) Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability - Vulnerability ID: cisco-sa-ncs4k-tl1-GNnLwC6 - CVE Number: CVE-2022-20845 - CVSS Score: 6.0 2. Affected Products: - Affected Products: Cisco NCS 4000 Series devices - Affected Software Version: Cisco IOS XR Software 3. Vulnerability Impact: - Description: A vulnerability in the TL1 feature may allow an unauthorized local attacker to trigger a memory leak in the TL1 process. - Exploitation Method: The vulnerability can be exploited by connecting to the device and sending TL1 commands. - Impact: Successful exploitation may cause the TL1 process to consume excessive memory. When memory reaches a threshold, the Resource Monitor (Resmon) process will begin restarting or terminating the top five most memory-consuming processes, resulting in a denial of service (DoS). 4. Remediation: - Published Fix: Cisco has released software updates to address this vulnerability. - Workaround: No workaround is available to mitigate this vulnerability. 5. Affected Product List: - Confirmed Affected Products: Cisco NCS 4000 Series devices - Confirmed Unaffected Products: Cisco IOS XE Software on Cisco NCS 4200 Series devices 6. Affected Software Version: - Affected Software Version: Cisco IOS XR Software 7. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.32 8. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 9. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 10. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 11. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 12. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 13. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 14. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 15. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 16. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 17. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 18. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 19. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 20. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 21. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 22. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 23. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 24. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 25. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 26. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 27. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 28. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 29. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 30. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 31. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 32. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 33. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 34. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 35. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 36. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 37. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 38. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 39. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 40. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 41. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5

Goal Reached Thanks to every supporter — we hit 100%!

Cisco NCS 4000 TL1 DoS Vulnerability (CVE-2022-20845) Advisory