← Back to browse · API

CVE-2022-20821

Severity
MEDIUM
CVSS
6.5
EPSS
0.1176
Risk score
55.12
CISA KEV
Yes
PoC
No
Published
2022-05-23
Modified
2022-05-23
First seen
2026-08-07
Aliases
EUVD-2022-26071, GHSA-6WHC-CMC9-99Q6
Products
Cisco:Cisco IOS XR Software n/a, Cisco:IOS XR
Sources
euvd EUVD-2022-26071
cisa.gov CVE-2022-20821

Description

Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open port and allow access to the Redis instance that is running within the NOSi container.

References