- Vendor / Project
- Cisco
- Product
- IOS and IOS XE
- Date added
- Mar 25, 2022
- Due date
- Apr 15, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-20
Description
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges.
Required action
Apply updates per vendor instructions.