PT-2022-6636 · Cisco · Cisco Aironet Access Points+1
Javier Contreras
·
Published
2022-09-27
·
Updated
2022-10-04
·
CVE-2022-20728
CVSS v3.1
4.7
Medium
| Vector | AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Cisco Aironet Access Points (affected versions not specified)
Cisco Wireless LAN Controller (WLC) (affected versions not specified)
Description
The issue is related to insufficient access control in the software of Cisco Aironet Access Points and Cisco Wireless LAN Controller (WLC). It allows a remote attacker to bypass security restrictions. The vulnerability in the client forwarding code of Cisco Access Points could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs. This is due to a logic error that forwards packets received on the native VLAN to wireless clients. An attacker could exploit this by accessing the native VLAN and directing traffic to the client using their MAC/IP combination, potentially bypassing VLAN separation and Layer 3 protection mechanisms.
Recommendations
For Cisco Aironet Access Points, consider restricting access to the native VLAN to minimize the risk of exploitation.
For Cisco Wireless LAN Controller (WLC), restrict access to the vulnerable client forwarding code until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Access Control
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cisco Aironet Access Points
Cisco Wireless Lan Controller