Is CVE-2022-20823 being actively exploited?

CVE-2022-20823 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2022-20823?

CVE-2022-20823 has a CVSS 3.1 base score of 8.6 (HIGH).

CVE-2022-20823

HIGH · CVSS 8.6EPSS 1.1%EU EUVD

A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incomplete input validation of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending a malicious OSPFv3 link-state advertisement (LSA) to an affected device. A successful exploit could allow the attacker to cause the OSPFv3 process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition. Note: The OSPFv3 feature is disabled by default. To exploit this vulnerability, an attacker must be able to establish a full OSPFv3 neighbor state with an affected device. For more information about exploitation conditions, see the Details section of this advisory.

Key facts

CVSS score: 8.6 (v3.1)
Severity: HIGH
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Weakness (CWE): CWE-126
EPSS score: 1.1% (65th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2022-26073)
Published: August 25, 2022
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2022-26073 in the EU Vulnerability Database. Last updated in EUVD on November 6, 2024.

View on the EU Vulnerability Database

Affected products

cisco / nexus 3016
cisco / nexus 3016 firmware
cisco / nexus 3016q
cisco / nexus 3016q firmware
cisco / nexus 3048
cisco / nexus 3048 firmware
cisco / nexus 3064
cisco / nexus 3064 firmware
cisco / nexus 3064-32t
cisco / nexus 3064-32t firmware
cisco / nexus 3064-t
cisco / nexus 3064-t firmware
cisco / nexus 3064-x
cisco / nexus 3064-x firmware
cisco / nexus 3064t
cisco / nexus 3064t firmware
cisco / nexus 3064x
cisco / nexus 3064x firmware
cisco / nexus 3100
cisco / nexus 3100 firmware
cisco / nexus 3100-v
cisco / nexus 3100-v firmware
cisco / nexus 3100-z
cisco / nexus 3100-z firmware
cisco / nexus 3100v
cisco / nexus 3100v firmware
cisco / nexus 31108pc-v
cisco / nexus 31108pc-v firmware
cisco / nexus 31108pv-v
cisco / nexus 31108pv-v firmware
cisco / nexus 31108tc-v
cisco / nexus 31108tc-v firmware
cisco / nexus 31128pq
cisco / nexus 31128pq firmware
cisco / nexus 3132c-z
cisco / nexus 3132c-z firmware
cisco / nexus 3132q
cisco / nexus 3132q firmware
cisco / nexus 3132q-v
cisco / nexus 3132q-v firmware
cisco / nexus 3132q-x
cisco / nexus 3132q-x firmware
cisco / nexus 3132q-x/3132q-xl
cisco / nexus 3132q-x/3132q-xl firmware
cisco / nexus 3132q-xl
cisco / nexus 3132q-xl firmware
cisco / nexus 3164q
cisco / nexus 3164q firmware
cisco / nexus 3172
cisco / nexus 3172 firmware

and 244 more…

Certified products that may be affected

2 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Nexus 7000 18 Slot - Cisco Systems, Inc. - FIPS 140 1534 - historical
Nexus 7000 10 Slot - Cisco Systems, Inc. - FIPS 140 1533 - historical

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ospfv3-dos-48qutcu(Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain