← All CVEs

CVE-2022-20695

critical · 10

A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to bypass authentication controls and log in to the device through the management interface This vulnerability is due to the improper implementation of the password validation algorithm. An attacker could exploit this vulnerability by logging in to an affected device with crafted credentials. A successful exploit could allow the attacker to bypass authentication and log in to the device as an administrator. The attacker could obtain privileges that are the same level as an administrative user but it depends on the crafted credentials. Note: This vulnerability exists because of a non-default device configuration that must be present for it to be exploitable. For details about the vulnerable configuration, see the Vulnerable Products section of this advisory.

10
CVSS
19.8%
EPSS (exploit prob.)
97th
EPSS percentile
2022-04-15
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-303CWE-287

Affected products

VendorProductAffected versions
ciscowireless_lan_controller_8.10.151.0all versions
ciscowireless_lan_controller_8.10.162.0all versions
ciscovirtual_wireless_controllerall versions
cisco3504_wireless_controllerall versions
cisco5520_wireless_controllerall versions
cisco8540_wireless_controllerall versions
ciscoaironet_1540all versions
ciscoaironet_1542dall versions
ciscoaironet_1542iall versions
ciscoaironet_1560all versions
ciscoaironet_1562dall versions
ciscoaironet_1562eall versions
ciscoaironet_1562iall versions
ciscoaironet_1815all versions
ciscoaironet_1815iall versions
ciscoaironet_1815mall versions
ciscoaironet_1815tall versions
ciscoaironet_1815wall versions
ciscoaironet_1830all versions
ciscoaironet_1830eall versions
ciscoaironet_1830iall versions
ciscoaironet_1832all versions
ciscoaironet_1850all versions
ciscoaironet_1850eall versions
ciscoaironet_1850iall versions
ciscoaironet_1852all versions
ciscoaironet_2800all versions
ciscoaironet_2800eall versions
ciscoaironet_2800iall versions
ciscoaironet_3800all versions
ciscoaironet_3800eall versions
ciscoaironet_3800iall versions
ciscoaironet_3800pall versions
ciscoaironet_4800all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-20695