CVE-2022-20684: Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability
First published: Fri Apr 15 2022(Updated: )
A vulnerability in Simple Network Management Protocol (SNMP) trap generation for wireless clients of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause an affected device to unexpectedly reload, resulting in a denial of service (DoS) condition on the device. This vulnerability is due to a lack of input validation of the information used to generate an SNMP trap related to a wireless client connection event. An attacker could exploit this vulnerability by sending an 802.1x packet with crafted parameters during the wireless authentication setup phase of a connection. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE | =3.15.1xbs | |
| Cisco IOS XE | =3.15.2xbs | |
| Cisco IOS XE | =16.6.1 | |
| Cisco IOS XE | =16.6.2 | |
| Cisco IOS XE | =16.6.3 | |
| Cisco IOS XE | =16.6.4 | |
| Cisco IOS XE | =16.6.4a | |
| Cisco IOS XE | =16.6.4s | |
| Cisco IOS XE | =16.6.5 | |
| Cisco IOS XE | =16.6.5a | |
| Cisco IOS XE | =16.6.5b | |
| Cisco IOS XE | =16.6.6 | |
| Cisco IOS XE | =16.6.7 | |
| Cisco IOS XE | =16.6.7a | |
| Cisco IOS XE | =16.6.8 | |
| Cisco IOS XE | =16.6.9 | |
| Cisco IOS XE | =16.6.10 | |
| Cisco IOS XE | =16.7.1 | |
| Cisco IOS XE | =16.7.1a | |
| Cisco IOS XE | =16.7.1b | |
| Cisco IOS XE | =16.7.2 | |
| Cisco IOS XE | =16.7.3 | |
| Cisco IOS XE | =16.7.4 | |
| Cisco IOS XE | =16.8.1 | |
| Cisco IOS XE | =16.8.1a | |
| Cisco IOS XE | =16.8.1b | |
| Cisco IOS XE | =16.8.1c | |
| Cisco IOS XE | =16.8.1d | |
| Cisco IOS XE | =16.8.1e | |
| Cisco IOS XE | =16.8.1s | |
| Cisco IOS XE | =16.8.2 | |
| Cisco IOS XE | =16.8.3 | |
| Cisco IOS XE | =16.9.1 | |
| Cisco IOS XE | =16.9.1a | |
| Cisco IOS XE | =16.9.1b | |
| Cisco IOS XE | =16.9.1c | |
| Cisco IOS XE | =16.9.1d | |
| Cisco IOS XE | =16.9.1s | |
| Cisco IOS XE | =16.9.2 | |
| Cisco IOS XE | =16.9.2a | |
| Cisco IOS XE | =16.9.2s | |
| Cisco IOS XE | =16.9.3 | |
| Cisco IOS XE | =16.9.3a | |
| Cisco IOS XE | =16.9.3h | |
| Cisco IOS XE | =16.9.3s | |
| Cisco IOS XE | =16.9.4 | |
| Cisco IOS XE | =16.9.4c | |
| Cisco IOS XE | =16.9.5 | |
| Cisco IOS XE | =16.9.5f | |
| Cisco IOS XE | =16.9.6 | |
| Cisco IOS XE | =16.9.7 | |
| Cisco IOS XE | =16.9.8 | |
| Cisco IOS XE | =16.10.1 | |
| Cisco IOS XE | =16.10.1a | |
| Cisco IOS XE | =16.10.1b | |
| Cisco IOS XE | =16.10.1c | |
| Cisco IOS XE | =16.10.1d | |
| Cisco IOS XE | =16.10.1e | |
| Cisco IOS XE | =16.10.1f | |
| Cisco IOS XE | =16.10.1g | |
| Cisco IOS XE | =16.10.1s | |
| Cisco IOS XE | =16.10.2 | |
| Cisco IOS XE | =16.10.3 | |
| Cisco IOS XE | =16.11.1 | |
| Cisco IOS XE | =16.11.1a | |
| Cisco IOS XE | =16.11.1b | |
| Cisco IOS XE | =16.11.1c | |
| Cisco IOS XE | =16.11.1s | |
| Cisco IOS XE | =16.11.2 | |
| Cisco IOS XE | =16.12.1 | |
| Cisco IOS XE | =16.12.1a | |
| Cisco IOS XE | =16.12.1c | |
| Cisco IOS XE | =16.12.1s | |
| Cisco IOS XE | =16.12.1t | |
| Cisco IOS XE | =16.12.1w | |
| Cisco IOS XE | =16.12.1x | |
| Cisco IOS XE | =16.12.1y | |
| Cisco IOS XE | =16.12.1z | |
| Cisco IOS XE | =16.12.1z1 | |
| Cisco IOS XE | =16.12.1z2 | |
| Cisco IOS XE | =16.12.2 | |
| Cisco IOS XE | =16.12.2a | |
| Cisco IOS XE | =16.12.2s | |
| Cisco IOS XE | =16.12.2t | |
| Cisco IOS XE | =17.1.1 | |
| Cisco IOS XE | =17.1.1a | |
| Cisco IOS XE | =17.1.1s | |
| Cisco IOS XE | =17.1.1t | |
| Cisco IOS XE | =17.1.2 | |
| Cisco IOS XE | =17.1.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-20684 vulnerability about?
The vulnerability in Simple Network Management Protocol (SNMP) trap generation for wireless clients of Cisco IOS XE Wireless Controller Software could allow an unauthenticated attacker to cause a denial of service on affected devices.
How severe is CVE-2022-20684?
CVE-2022-20684 has a severity level of 6.5 (high).
Which software versions are affected by CVE-2022-20684?
The vulnerability affects a range of Cisco IOS XE versions from 3.15.1xbs to 17.1.3.
Is authentication required to exploit CVE-2022-20684?
No, an unauthenticated attacker can exploit this vulnerability.
Where can I find more information about CVE-2022-20684?
You can refer to the Cisco Security Advisory for CVE-2022-20684 for more details.
- collector/nvd-index
- agent/weakness
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/severity
- agent/title
- agent/author
- agent/tags
- agent/first-publish-date
- agent/description
- agent/type
- agent/event
- vendor/cisco
- canonical/cisco ios xe
- version/cisco ios xe/3.15.1xbs
- version/cisco ios xe/3.15.2xbs
- version/cisco ios xe/16.6.1
- version/cisco ios xe/16.6.2
- version/cisco ios xe/16.6.3
- version/cisco ios xe/16.6.4
- version/cisco ios xe/16.6.4a
- version/cisco ios xe/16.6.4s
- version/cisco ios xe/16.6.5
- version/cisco ios xe/16.6.5a
- version/cisco ios xe/16.6.5b
- version/cisco ios xe/16.6.6
- version/cisco ios xe/16.6.7
- version/cisco ios xe/16.6.7a
- version/cisco ios xe/16.6.8
- version/cisco ios xe/16.6.9
- version/cisco ios xe/16.6.10
- version/cisco ios xe/16.7.1
- version/cisco ios xe/16.7.1a
- version/cisco ios xe/16.7.1b
- version/cisco ios xe/16.7.2
- version/cisco ios xe/16.7.3
- version/cisco ios xe/16.7.4
- version/cisco ios xe/16.8.1
- version/cisco ios xe/16.8.1a
- version/cisco ios xe/16.8.1b
- version/cisco ios xe/16.8.1c
- version/cisco ios xe/16.8.1d
- version/cisco ios xe/16.8.1e
- version/cisco ios xe/16.8.1s
- version/cisco ios xe/16.8.2
- version/cisco ios xe/16.8.3
- version/cisco ios xe/16.9.1
- version/cisco ios xe/16.9.1a
- version/cisco ios xe/16.9.1b
- version/cisco ios xe/16.9.1c
- version/cisco ios xe/16.9.1d
- version/cisco ios xe/16.9.1s
- version/cisco ios xe/16.9.2
- version/cisco ios xe/16.9.2a
- version/cisco ios xe/16.9.2s
- version/cisco ios xe/16.9.3
- version/cisco ios xe/16.9.3a
- version/cisco ios xe/16.9.3h
- version/cisco ios xe/16.9.3s
- version/cisco ios xe/16.9.4
- version/cisco ios xe/16.9.4c
- version/cisco ios xe/16.9.5
- version/cisco ios xe/16.9.5f
- version/cisco ios xe/16.9.6
- version/cisco ios xe/16.9.7
- version/cisco ios xe/16.9.8
- version/cisco ios xe/16.10.1
- version/cisco ios xe/16.10.1a
- version/cisco ios xe/16.10.1b
- version/cisco ios xe/16.10.1c
- version/cisco ios xe/16.10.1d
- version/cisco ios xe/16.10.1e
- version/cisco ios xe/16.10.1f
- version/cisco ios xe/16.10.1g
- version/cisco ios xe/16.10.1s
- version/cisco ios xe/16.10.2
- version/cisco ios xe/16.10.3
- version/cisco ios xe/16.11.1
- version/cisco ios xe/16.11.1a
- version/cisco ios xe/16.11.1b
- version/cisco ios xe/16.11.1c
- version/cisco ios xe/16.11.1s
- version/cisco ios xe/16.11.2
- version/cisco ios xe/16.12.1
- version/cisco ios xe/16.12.1a
- version/cisco ios xe/16.12.1c
- version/cisco ios xe/16.12.1s
- version/cisco ios xe/16.12.1t
- version/cisco ios xe/16.12.1w
- version/cisco ios xe/16.12.1x
- version/cisco ios xe/16.12.1y
- version/cisco ios xe/16.12.1z
- version/cisco ios xe/16.12.1z1
- version/cisco ios xe/16.12.1z2
- version/cisco ios xe/16.12.2
- version/cisco ios xe/16.12.2a
- version/cisco ios xe/16.12.2s
- version/cisco ios xe/16.12.2t
- version/cisco ios xe/17.1.1
- version/cisco ios xe/17.1.1a
- version/cisco ios xe/17.1.1s
- version/cisco ios xe/17.1.1t
- version/cisco ios xe/17.1.2
- version/cisco ios xe/17.1.3