vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2022-20678

Cisco IOS XE Software AppNav-XE Denial of Service Vulnerability

HIGH
7.5
CVSS Score
Published: April 15, 2022 at 02:16 PM UTC
Updated: June 17, 2026 at 04:24 AM UTC
25 products affected across 1 vendorIOS XeAsr 1002-xAsr 1001-X

Using Cisco IOS XE Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco IOS XE Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.5
Exploit prediction
EPSS 1.0%
SSVC
No known exploit

Description

A vulnerability in the AppNav-XE feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of certain TCP segments. An attacker could exploit this vulnerability by sending a stream of crafted TCP traffic at a high rate through an interface of an affected device. That interface would need to have AppNav interception enabled. A successful exploit could allow the attacker to cause the device to reload.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS Xe· Cisco
95%
16.12.416.12.516.9.617.3.3
cisco-1100-4g-integrated-services-router (environment) · cisco-1100-6g-integrated-services-router (environment) · cisco-1101-integrated-services-router (environment) · cisco-1109-integrated-services-router (environment) · cisco-1111x-integrated-services-router (environment) · cisco-111x-integrated-services-router (environment) · cisco-1120-integrated-services-router (environment) · cisco-1131-integrated-services-router (environment) · cisco-1160-integrated-services-router (environment) · cisco-4221-integrated-services-router (environment) · cisco-4331-integrated-services-router (environment) · cisco-4431-integrated-services-router (environment) · cisco-4461-integrated-services-router (environment) · cisco-asr-1001-x (environment) · cisco-asr-1002-x (environment) · cisco-catalyst-8000v-edge (environment) · cisco-catalyst-8300-1n1s-4t2x (environment) · cisco-catalyst-8300-1n1s-6t (environment) · cisco-catalyst-8300-2n2s-4t2x (environment) · cisco-catalyst-8300-2n2s-6t (environment) · cisco-catalyst-8500 (environment) · cisco-catalyst-8500-4qc (environment) · cisco-catalyst-8500l (environment) · cisco-cloud-services-router-1000v (environment)
1100-4G Integrated Services Router· Ciscodevice
80%
All versions
1100-6G Integrated Services Router· Ciscodevice
80%
All versions
1101 Integrated Services Router· Ciscodevice
80%
All versions
1109 Integrated Services Router· Ciscodevice
80%
All versions
1111X Integrated Services Router· Ciscodevice
80%
All versions
111X Integrated Services Router· Ciscodevice
80%
All versions
1120 Integrated Services Router· Ciscodevice
80%
All versions
1131 Integrated Services Router· Ciscodevice
80%
All versions
1160 Integrated Services Router· Ciscodevice
80%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

Vendor Advisoryx_refsource_CISCO
Source: [email protected]
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-appnav-xe-dos-j5MXTR4

SSVC — Action Prioritization

SSVCNo known exploitAutomatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.5HIGH[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-413CWE-755

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card