Denial of Service Vulnerability in Cisco IOS XR Software

CVE-2023-20233

What is CVE-2023-20233?

A vulnerability exists in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software, allowing unauthenticated remote attackers to potentially cause a denial of service (DoS) condition. This vulnerability arises from the improper processing of invalid continuity check messages (CCMs). By sending specially crafted CCMs to the affected device, an attacker may successfully crash the CFM service, particularly when displaying maintenance endpoint (MEP) information for peer MEPs.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References