BugZero | Cisco BugID CSCwb74496 - Cisco FXOS and NX-OS Software CDP DoS and Arbitrar...

Cisco - Defect ID: CSCwb74496

Cisco FXOS and NX-OS Software CDP DoS and Arbitrary Code Execution Vulnerability

Cisco - Defect ID: CSCwb74496

Cisco FXOS and NX-OS Software CDP DoS and Arbitrary Code Execution Vulnerability

Last updated on December 20th, 2025

BugZero Risk Score
7.8 High

Overall: 7.8

Severity: 8.2

Lifecycle: 9.1

Popularity: 5.1

What is the BugZero Risk Score?

Cisco Integration

Learn more about where this data comes from

Cisco Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Views: 1

Description

Symptom

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation of specific values that are within a Cisco Discovery Protocol message. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges or cause the Cisco Discovery Protocol process to crash and restart multiple times, which would cause the affected device to reload, resulting in a DoS condition. Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cdp-dos-ce-wWvPucC9 The Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory.

Conditions

Please refer to the Security Advisory.

Workaround

Please refer to the Security Advisory.

Further Problem Description

Please refer to the Security Advisory.

PSIRT Evaluation

The Cisco PSIRT has assigned this bug the following CVSS version 3 score. The Base CVSS score as of the time of evaluation is 8.8: https://tools.cisco.com/security/center/cvssCalculator.x?vector=CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE ID CVE-2022-20824 has been assigned to document this issue. Additional information on Cisco's security vulnerability policy can be found at the following URL: https://tools.cisco.com/security/center/resources/security_vulnerability_policy.html

Change history

2025-12-20 Added: 7.1(0)N1(1), 7.1(0)N1(1a), 7.1(0)N1(1b), 7.1(1)N1(1), 7.1(2)N1(1), 7.1(3)N1(1), 7.1(3)N1(2), 7.1(4)N1(1), 7.1(5)N1(1), 7.1(5)N1(1b), 7.3(0)N1(1), 7.3(1)N1(1), 7.3(10)N1(1), 7.3(11)N1(1), 7.3(2)N1(1), 7.3(3)N1(1), 7.3(4)N1(1), 7.3(5)N1(1), 7.3(6)N1(1), 7.3(7)N1(1), 7.3(7)N1(1a), 7.3(7)N1(1b), 7.3(8)N1(1), 7.3(9)N1(1)

Relevant Products

Click on a version to see all relevant bugs

Fixed versions: 7.3(12)N1(1), 7.3(13)N1(1), 7.3(14)N1(1), 7.3(15)N1(1), 7.3(16)N1(1), 7.3(17)N1(1)

Relevant Products

Click on a version to see all relevant bugs

Fixed versions: 7.3(12)N1(1), 7.3(13)N1(1), 7.3(14)N1(1), 7.3(15)N1(1), 7.3(16)N1(1), 7.3(17)N1(1)

Top Cisco Defects

9.7Defect ID: CSCws52722
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
9.7Defect ID: CSCwt50498
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
9.7Defect ID: CSCvn12442
Under heavy load, ISE live logs stop working on ISE 2.3
9.7Defect ID: CSCws61409
Live Logs Not Displaying on GUI Due to Fast Expansion of MNT Database
9.7Defect ID: CSCvz07394
2960X Stack may observe hang/freeze of member switches or complete stack.

Ready to prevent the next vendor outage?

Get a demo

Cisco - Defect ID: CSCwb74496

Cisco FXOS and NX-OS Software CDP DoS and Arbitrary Code Execution Vulnerability

Cisco - Defect ID: CSCwb74496

Cisco FXOS and NX-OS Software CDP DoS and Arbitrary Code Execution Vulnerability

Last updated on December 20th, 2025

BugZero Risk Score7.8 High

Bug Details

Symptom

Conditions

Workaround

Further Problem Description

PSIRT Evaluation

Top Cisco Defects

Ready to prevent the next vendor outage?

Links

BugZero Risk Score
7.8 High