CVE-2022-20855: Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points Privilege Escalation Vulnerability
First published: Fri Sep 30 2022(Updated: )
A vulnerability in the self-healing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points could allow an authenticated, local attacker to escape the restricted controller shell and execute arbitrary commands on the underlying operating system of the access point. This vulnerability is due to improper checks throughout the restart of certain system processes. An attacker could exploit this vulnerability by logging on to an affected device and executing certain CLI commands. A successful exploit could allow the attacker to execute arbitrary commands on the underlying OS as root. To successfully exploit this vulnerability, an attacker would need valid credentials for a privilege level 15 user of the wireless controller.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE | =17.6.1 | |
| Cisco Catalyst 9105 | ||
| Cisco Catalyst 9105axi | ||
| Cisco Catalyst 9105axw | ||
| Cisco Catalyst 9115 | ||
| Cisco Catalyst 9115 Ap | ||
| Cisco Catalyst 9115axe | ||
| Cisco Catalyst 9115axi | ||
| Cisco Catalyst 9117 | ||
| Cisco Catalyst 9117 Ap | ||
| Cisco Catalyst 9117axi | ||
| Cisco Catalyst 9120 | ||
| Cisco Catalyst 9120 Ap | ||
| Cisco Catalyst 9120axe | ||
| Cisco Catalyst 9120axi | ||
| Cisco Catalyst 9120axp | ||
| Cisco Catalyst 9124 | ||
| Cisco Catalyst 9124axd | ||
| Cisco Catalyst 9124axi | ||
| Cisco Catalyst 9130 | ||
| Cisco Catalyst 9130 Ap | ||
| Cisco Catalyst 9130axe | ||
| Cisco Catalyst 9130axi | ||
| Cisco Catalyst 9800 | ||
| Cisco Catalyst 9800-40 | ||
| Cisco Catalyst 9800-80 | ||
| Cisco Catalyst 9800-cl | ||
| Cisco Catalyst 9800-l | ||
| Cisco Catalyst 9800-l-c | ||
| Cisco Catalyst 9800-l-f |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-20855?
CVE-2022-20855 is a vulnerability in the self-healing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points.
What is the severity of CVE-2022-20855?
The severity of CVE-2022-20855 is high.
How can an attacker exploit CVE-2022-20855?
An attacker can exploit CVE-2022-20855 by escaping the restricted controller shell and executing arbitrary commands on the underlying operating system of the access point.
Which software versions are affected by CVE-2022-20855?
Cisco IOS XE Software version 17.6.1 is affected by CVE-2022-20855.
Where can I find more information about CVE-2022-20855?
You can find more information about CVE-2022-20855 on the Cisco Security Advisory page.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/title
- agent/author
- agent/references
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- vendor/cisco
- canonical/cisco ios xe
- version/cisco ios xe/17.6.1
- canonical/cisco catalyst 9105
- canonical/cisco catalyst 9105axi
- canonical/cisco catalyst 9105axw
- canonical/cisco catalyst 9115
- canonical/cisco catalyst 9115 ap
- canonical/cisco catalyst 9115axe
- canonical/cisco catalyst 9115axi
- canonical/cisco catalyst 9117
- canonical/cisco catalyst 9117 ap
- canonical/cisco catalyst 9117axi
- canonical/cisco catalyst 9120
- canonical/cisco catalyst 9120 ap
- canonical/cisco catalyst 9120axe
- canonical/cisco catalyst 9120axi
- canonical/cisco catalyst 9120axp
- canonical/cisco catalyst 9124
- canonical/cisco catalyst 9124axd
- canonical/cisco catalyst 9124axi
- canonical/cisco catalyst 9130
- canonical/cisco catalyst 9130 ap
- canonical/cisco catalyst 9130axe
- canonical/cisco catalyst 9130axi
- canonical/cisco catalyst 9800
- canonical/cisco catalyst 9800-40
- canonical/cisco catalyst 9800-80
- canonical/cisco catalyst 9800-cl
- canonical/cisco catalyst 9800-l
- canonical/cisco catalyst 9800-l-c
- canonical/cisco catalyst 9800-l-f