CVE Tracker

CVE ID	Severity	EPSS	Vendor	Description	Date	Status
CVE-2022-20821	High	20.4%	CiscoIOS XR	Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open port and allow access to the Redis instance that is running within the NOSi container.	May 23, 2022	KEV
CVE-2022-0543	High	94.4%	RedisDebian-specific Redis Servers	Redis is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.	Mar 28, 2022	KEV

CVE-2022-20821KEV

High

Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open port and allow access to the Redis instance that is running within the NOSi container.

CiscoEPSS 20.4%

CVE-2022-0543KEV

High

Redis is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

RedisEPSS 94.4%