CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-05-26
Cisco IOS XR Software Health Check RPM Redis Unauthenticated Remote Data Manipulation and Information Disclosure (CVE-2022-20821)
[Affected Scope] Cisco IOS XR Software deployments with the Health Check RPM enabled
[Impact] Unauthenticated remote attackers can connect to the Redis instance inside the NOSi container, enabling them to write to the database, write arbitrary files to the container filesystem, and retrieve database information
[Mitigation] Apply official Cisco software updates, deactivate the unused Health Check RPM, or restrict access to TCP port 6379 using infrastructure ACLs