Vulnslist

find the latest Cisco vulnerabilities

Cisco Identity Services Engine Software Resource Exhaustion Vulnerability

cisco-sa-ise-sec-atk-dos-zw5RCUYp · Medium · Published · Updated

A vulnerability in a feature that monitors RADIUS requests on Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to negatively affect the performance of an affected device. This vulnerability is due to insufficient management of system resources. An attacker could exploit this vulnerability by taking actions that cause Cisco ISE Software to receive specific RADIUS traffic. A successful and sustained exploit of this vulnerability could allow the attacker to cause reduced performance of the affected device, resulting in significant delays to RADIUS authentications. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-sec-atk-dos-zw5RCUYp

Workarounds

As a workaround, customers who do not require the detection of a steady, high rate of RADIUS requests for their daily operations may disable the detection to prevent the exploitation of this vulnerability. To disable this feature, log in to the web management GUI with super admin privileges. Choose Administration > System > Settings > Protocols > RADIUS and uncheck Detect High Rate of RADIUS Requests.

While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment.

CVEsCVE-2022-20937
Cisco Bug IDsCSCvz99311
CVSS ScoreBase 5.3
Base 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:X
Product Names From Source
Cisco Identity Services Engine Software

Related Products

Product CVE Evidence
Cisco RV Series Routers CVE-2022-20937 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2022-20937 Cisco OpenVuln
Cisco Identity Services Engine Software CVE-2022-20937 Cisco OpenVuln