CVE-2022-20849

Summary

CVE-2022-20849 is a vulnerability affecting the PPPoE feature in Cisco IOS XR Software. An unauthenticated, adjacent attacker can exploit this issue by sending specific packets, causing the PPPoE process to continually crash. The error condition in the affected packets is not handled properly by the software, leading to a denial of service (DoS) condition. Cisco has released software updates to address this vulnerability, and there are currently no workarounds available. This issue was disclosed in the September 2022 Cisco IOS XR Software Security Advisory Bundled Publication.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.