CVE Feed

    Dashboard / CVE / CVE-2022-20769

    CVE-2022-20769

    A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient error validation. An attacker could exploit this vulnerability by sending crafted packets to an affected device. A successful exploit could allow the attacker to cause the wireless LAN controller to crash, resulting in a DoS condition. Note: This vulnerability affects only devices that have Federal Information Processing Standards (FIPS) mode enabled.

    Published:Sep 30, 2022
    Last Modified:Nov 21, 2024
    EPS:Sep 30, 2022
    EPSS Score:0.00039
    CVSS Score:7.4

    Affected Products

    Vendor
    Cisco
    Product
    2504 Wireless Lan Controller
    Vendor
    Cisco
    Product
    3504 Wireless Lan Controller
    Vendor
    Cisco
    Product
    5508 Wireless Lan Controller
    Vendor
    Cisco
    Product
    5520 Wireless Lan Controller
    Vendor
    Cisco
    Product
    8540 Wireless Lan Controller
    Vendor
    Cisco
    Product
    Flex 7510
    Vendor
    Cisco
    Product
    Virtual Wireless Controller
    Vendor
    Cisco
    Product
    Wireless Lan Controller Software

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2017-3854 (CVSS 8.8) — A vulnerability in the mesh code of Cisco Wireless LAN Controller (WLC) software could allow an unauthenticate…
    CVE-2013-1235 (CVSS 5) — Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TEL…
    CVE-2012-0371 (CVSS 9.3) — Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-ba…
    CVE-2012-0370 (CVSS 7.8) — Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 befo…
    CVE-2012-0368 (CVSS 7.8) — The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x,…
    CVE-2012-0369 (CVSS 7.8) — Cisco Wireless LAN Controller (WLC) devices with software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High