CVE-2022-20695

CVE	CVE-2022-20695
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-04-15 15:15:00 UTC
Updated	2023-11-07 03:42:00 UTC
Description	A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to bypass authentication controls and log in to the device through the management interface This vulnerability is due to the improper implementation of the password validation algorithm. An attacker could exploit this vulnerability by logging in to an affected device with crafted credentials. A successful exploit could allow the attacker to bypass authentication and log in to the device as an administrator. The attacker could obtain privileges that are the same level as an administrative user but it depends on the crafted credentials. Note: This vulnerability exists because of a non-default device configuration that must be present for it to be exploitable. For details about the vulnerable configuration, see the Vulnerable Products section of this advisory.

Problem Types: CWE-287

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Cisco	3504 Wireless Controller	-	All	All	All
Hardware	Cisco	5520 Wireless Controller	-	All	All	All
Hardware	Cisco	8540 Wireless Controller	-	All	All	All
Hardware	Cisco	Aironet 1540	-	All	All	All
Hardware	Cisco	Aironet 1542d	-	All	All	All
Hardware	Cisco	Aironet 1542i	-	All	All	All
Hardware	Cisco	Aironet 1560	-	All	All	All
Hardware	Cisco	Aironet 1562d	-	All	All	All
Hardware	Cisco	Aironet 1562e	-	All	All	All
Hardware	Cisco	Aironet 1562i	-	All	All	All
Hardware	Cisco	Aironet 1815	-	All	All	All
Hardware	Cisco	Aironet 1815i	-	All	All	All
Hardware	Cisco	Aironet 1815m	-	All	All	All
Hardware	Cisco	Aironet 1815t	-	All	All	All
Hardware	Cisco	Aironet 1815w	-	All	All	All
Hardware	Cisco	Aironet 1830	-	All	All	All
Hardware	Cisco	Aironet 1830e	-	All	All	All
Hardware	Cisco	Aironet 1830i	-	All	All	All
Hardware	Cisco	Aironet 1832	-	All	All	All
Hardware	Cisco	Aironet 1850	-	All	All	All
Hardware	Cisco	Aironet 1850e	-	All	All	All
Hardware	Cisco	Aironet 1850i	-	All	All	All
Hardware	Cisco	Aironet 1852	-	All	All	All
Hardware	Cisco	Aironet 2800	-	All	All	All
Hardware	Cisco	Aironet 2800e	-	All	All	All
Hardware	Cisco	Aironet 2800i	-	All	All	All
Hardware	Cisco	Aironet 3800	-	All	All	All
Hardware	Cisco	Aironet 3800e	-	All	All	All
Hardware	Cisco	Aironet 3800i	-	All	All	All
Hardware	Cisco	Aironet 3800p	-	All	All	All
Hardware	Cisco	Aironet 4800	-	All	All	All
Operating System	Cisco	Mobility Express Software	-	All	All	All
Application	Cisco	Virtual Wireless Controller	-	All	All	All
Hardware	Cisco	Virtual Wireless Controller	-	All	All	All
Application	Cisco	Wireless Lan Controller 8.10.151.0	All	All	All	All
Application	Cisco	Wireless Lan Controller 8.10.162.0	All	All	All	All

Reference	Source	Link	Tags
20220413 Cisco Wireless LAN Controller Management Interface Authentication Bypass Vulnerability	CISCO	tools.cisco.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

317143 Cisco Wireless LAN Controller Management Interface Authentication Bypass Vulnerability (cisco-sa-wlc-auth-bypass-JRNhV4fF)