CVE-2022-20845

Summary

CVE-2022-20845 is a memory leak vulnerability affecting the TL1 function of Cisco NCS 4000 Series. An authenticated, local attacker can exploit this issue by issuing TL1 commands after gaining access to the device. The vulnerability arises due to TL1's failure to free memory under certain conditions. Successful exploitation may cause the TL1 process to consume excessive memory, resulting in a denial of service (DoS) when the system shuts down or restarts the top memory consumers. Cisco has released software updates to mitigate this vulnerability, and no workarounds are currently available. This advisory is part of the September 2022 Cisco IOS XR Software Security Advisory Bundled Publication.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.