CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-20695

A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to bypass authentication controls and log in to the device through the management interface This vulnerability is due to the improper implementation of the password validation algorithm. An attacker could exploit this vulnerability by logging in to an affected device with crafted credentials. A successful exploit could allow the attacker to bypass authentication and log in to the device as an administrator. The attacker could obtain privileges that are the same level as an administrative user but it depends on the crafted credentials. Note: This vulnerability exists because of a non-default device configuration that must be present for it to be exploitable. For details about the vulnerable configuration, see the Vulnerable Products section of this advisory.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 60.4%

CVSS Severity

CVSS v3 Score 10.0

CVSS v2 Score 9.3

References

Products affected by CVE-2022-20695

Cisco » Virtual Wireless Controller » Version: N/A

cpe:2.3:a:cisco:virtual_wireless_controller:-
Cisco » Wireless Lan Controller 8.10.151.0 » Version: Any

cpe:2.3:a:cisco:wireless_lan_controller_8.10.151.0:*
Cisco » Wireless Lan Controller 8.10.162.0 » Version: Any

cpe:2.3:a:cisco:wireless_lan_controller_8.10.162.0:*
Cisco » 3504 Wireless Controller » Version: N/A

cpe:2.3:h:cisco:3504_wireless_controller:-
Cisco » 5520 Wireless Controller » Version: N/A

cpe:2.3:h:cisco:5520_wireless_controller:-
Cisco » 8540 Wireless Controller » Version: N/A

cpe:2.3:h:cisco:8540_wireless_controller:-
Cisco » Aironet 1540 » Version: N/A

cpe:2.3:h:cisco:aironet_1540:-
Cisco » Aironet 1542d » Version: N/A

cpe:2.3:h:cisco:aironet_1542d:-
Cisco » Aironet 1542i » Version: N/A

cpe:2.3:h:cisco:aironet_1542i:-
Cisco » Aironet 1560 » Version: N/A

cpe:2.3:h:cisco:aironet_1560:-
Cisco » Aironet 1562d » Version: N/A

cpe:2.3:h:cisco:aironet_1562d:-
Cisco » Aironet 1562e » Version: N/A

cpe:2.3:h:cisco:aironet_1562e:-
Cisco » Aironet 1562i » Version: N/A

cpe:2.3:h:cisco:aironet_1562i:-
Cisco » Aironet 1815 » Version: N/A

cpe:2.3:h:cisco:aironet_1815:-
Cisco » Aironet 1815i » Version: N/A

cpe:2.3:h:cisco:aironet_1815i:-
Cisco » Aironet 1815m » Version: N/A

cpe:2.3:h:cisco:aironet_1815m:-
Cisco » Aironet 1815t » Version: N/A

cpe:2.3:h:cisco:aironet_1815t:-
Cisco » Aironet 1815w » Version: N/A

cpe:2.3:h:cisco:aironet_1815w:-
Cisco » Aironet 1830 » Version: N/A

cpe:2.3:h:cisco:aironet_1830:-
Cisco » Aironet 1830e » Version: N/A

cpe:2.3:h:cisco:aironet_1830e:-
Cisco » Aironet 1830i » Version: N/A

cpe:2.3:h:cisco:aironet_1830i:-
Cisco » Aironet 1832 » Version: N/A

cpe:2.3:h:cisco:aironet_1832:-
Cisco » Aironet 1850 » Version: N/A

cpe:2.3:h:cisco:aironet_1850:-
Cisco » Aironet 1850e » Version: N/A

cpe:2.3:h:cisco:aironet_1850e:-
Cisco » Aironet 1850i » Version: N/A

cpe:2.3:h:cisco:aironet_1850i:-
Cisco » Aironet 1852 » Version: N/A

cpe:2.3:h:cisco:aironet_1852:-
Cisco » Aironet 2800 » Version: N/A

cpe:2.3:h:cisco:aironet_2800:-
Cisco » Aironet 2800e » Version: N/A

cpe:2.3:h:cisco:aironet_2800e:-
Cisco » Aironet 2800i » Version: N/A

cpe:2.3:h:cisco:aironet_2800i:-
Cisco » Aironet 3800 » Version: N/A

cpe:2.3:h:cisco:aironet_3800:-
Cisco » Aironet 3800e » Version: N/A

cpe:2.3:h:cisco:aironet_3800e:-
Cisco » Aironet 3800i » Version: N/A

cpe:2.3:h:cisco:aironet_3800i:-
Cisco » Aironet 3800p » Version: N/A

cpe:2.3:h:cisco:aironet_3800p:-
Cisco » Aironet 4800 » Version: N/A

cpe:2.3:h:cisco:aironet_4800:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-20695

Products

Pricing

Contact Us