CVE-2022-20695: Cisco Wireless LAN Controller Management Interface Authentication Bypass Vulnerability
First published: Wed Apr 13 2022(Updated: )
A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to bypass authentication controls and log in to the device through the management interface This vulnerability is due to the improper implementation of the password validation algorithm. An attacker could exploit this vulnerability by logging in to an affected device with crafted credentials. A successful exploit could allow the attacker to bypass authentication and log in to the device as an administrator. The attacker could obtain privileges that are the same level as an administrative user but it depends on the crafted credentials. Note: This vulnerability exists because of a non-default device configuration that must be present for it to be exploitable. For details about the vulnerable configuration, see the Vulnerable Products section of this advisory.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Wireless Lan Controller 8.10.151.0 | ||
| Cisco Wireless Lan Controller 8.10.162.0 | ||
| Cisco Virtual Wireless Controller | ||
| Cisco 3504 Wireless Controller | ||
| Cisco 5520 Wireless Controller | ||
| Cisco 8540 Wireless Controller | ||
| Cisco Aironet 1540 | ||
| Cisco Aironet 1542d | ||
| Cisco Aironet 1542i | ||
| Cisco Aironet 1560 | ||
| Cisco Aironet 1562d | ||
| Cisco Aironet 1562e | ||
| Cisco Aironet 1562i | ||
| Cisco Aironet 1815 | ||
| Cisco Aironet 1815i | ||
| Cisco Aironet 1815m | ||
| Cisco Aironet 1815t | ||
| Cisco Aironet 1815w | ||
| Cisco Aironet 1830 | ||
| Cisco Aironet 1830e | ||
| Cisco Aironet 1830i | ||
| Cisco Aironet 1832 | ||
| Cisco Aironet 1850 | ||
| Cisco Aironet 1850e | ||
| Cisco Aironet 1850i | ||
| Cisco Aironet 1852 | ||
| Cisco Aironet 2800 | ||
| Cisco Aironet 2800e | ||
| Cisco Aironet 2800i | ||
| Cisco Aironet 3800 | ||
| Cisco Aironet 3800e | ||
| Cisco Aironet 3800i | ||
| Cisco Aironet 3800p | ||
| Cisco Aironet 4800 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-20695?
CVE-2022-20695 is a vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) Software.
How does CVE-2022-20695 affect Cisco Wireless LAN Controller Software?
CVE-2022-20695 could allow an unauthenticated, remote attacker to bypass authentication controls and log in to the device through the management interface.
What is the severity of CVE-2022-20695?
CVE-2022-20695 has a severity rating of critical.
How can I mitigate CVE-2022-20695?
To mitigate CVE-2022-20695, update to a fixed software release.
Where can I find more information about CVE-2022-20695?
More information about CVE-2022-20695 can be found on the Cisco Security Advisory page.
- agent/weakness
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/author
- agent/references
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/title
- agent/tags
- agent/first-publish-date
- agent/event
- vendor/cisco
- canonical/cisco wireless lan controller 8.10.151.0
- canonical/cisco wireless lan controller 8.10.162.0
- canonical/cisco virtual wireless controller
- canonical/cisco 3504 wireless controller
- canonical/cisco 5520 wireless controller
- canonical/cisco 8540 wireless controller
- canonical/cisco aironet 1540
- canonical/cisco aironet 1542d
- canonical/cisco aironet 1542i
- canonical/cisco aironet 1560
- canonical/cisco aironet 1562d
- canonical/cisco aironet 1562e
- canonical/cisco aironet 1562i
- canonical/cisco aironet 1815
- canonical/cisco aironet 1815i
- canonical/cisco aironet 1815m
- canonical/cisco aironet 1815t
- canonical/cisco aironet 1815w
- canonical/cisco aironet 1830
- canonical/cisco aironet 1830e
- canonical/cisco aironet 1830i
- canonical/cisco aironet 1832
- canonical/cisco aironet 1850
- canonical/cisco aironet 1850e
- canonical/cisco aironet 1850i
- canonical/cisco aironet 1852
- canonical/cisco aironet 2800
- canonical/cisco aironet 2800e
- canonical/cisco aironet 2800i
- canonical/cisco aironet 3800
- canonical/cisco aironet 3800e
- canonical/cisco aironet 3800i
- canonical/cisco aironet 3800p
- canonical/cisco aironet 4800