Cisco NCS 4000 TL1 DoS Vulnerability (CVE-2022-20845) Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability - Vulnerability ID: cisco-sa-ncs4k-tl1-GNnLwC6 - CVE Number: CVE-2022-20845 - CVSS Score: 6.0 2. Affected Products: - Affected Products: Cisco NCS 4000 Series devices - Affected Software Versions: Cisco IOS XR Software 3. Vulnerability Impact: - Vulnerability Description: A vulnerability in the TL1 function could allow an unauthenticated local attacker to cause a memory leak in the TL1 process. - Attack Method: This vulnerability can be exploited by connecting to the device and sending TL1 commands. - Impact: Successful exploitation of this vulnerability could cause the TL1 process to consume a large amount of memory. When the memory reaches a threshold, the resource monitor (Resmon) process will begin restarting or shutting down the top five memory-consuming processes, leading to a denial of service (DoS). 4. Remediation Measures: - Released Fixes: Cisco has released software updates to address this vulnerability. - Workarounds: There are no workarounds to address this vulnerability. 5. Affected Product List: - Confirmed Affected Products: Cisco NCS 4000 Series devices - Confirmed Unaffected Products: Cisco IOS XE Software on Cisco NCS 4200 Series devices 6. Affected Software Versions: - Affected Software Versions: Cisco IOS XR Software 7. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.32 8. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 9. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 10. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 11. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 12. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 13. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 14. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 15. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 16. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 17. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 18. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 19. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 20. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 21. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 22. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 23. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 24. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 25. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 26. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 27. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 28. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 29. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 30. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 31. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 32. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 33. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 34. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 35. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 36. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 37. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 38. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 39. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 40. Affected Software Version List: - Affected Software Version: Cisco IOS XR Software Release 6.5.26 41. Affected Software Version List: - Affec

Goal Reached Thanks to every supporter — we hit 100%!

Cisco NCS 4000 TL1 DoS Vulnerability (CVE-2022-20845) Advisory