What’s Vulnerable › Vulnerabilities

CVE-2022-20661: Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities

• Severity: medium (CVSS 4.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-15 · updated 2026-06-17
• Weakness: CWE-1221

Description

Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco IOS: from 15.2\(5\)ex before 15.2\(7\)e5; 15.2(8)e — fixed in 15.2\(7\)e5

How to fix

Upgrade to a fixed version: Cisco IOS 15.2\(7\)e5. Check the vendor advisory for mitigations.

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cdb-cmicr-vulns-KJjFtNb
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cdb-cmicr-vulns-KJjFtNb

Get alerted when CVE-2022-20661 or the next vulnerability affects your stack