CVE-2022-20695 Cisco Wireless LAN Controller Management Interface Authentication Bypass Vulnerability
An unauthenticated remote attacker can bypass authentication and gain administrative access to Cisco Wireless LAN Controllers via crafted credentials in non-default configurations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-20695?
CVE-2022-20695 is a critical authentication bypass vulnerability in Cisco Wireless LAN Controller (WLC), published on 15 Apr 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to bypass authentication controls and log in to the device through the management interface This vulnerability is due to the improper implementation of the password validation algorithm. An attacker could exploit this vulnerability by logging in to an affected device with crafted credentials. A successful exploit could allow the attacker to bypass authentication and log in to the device as an administrator. The attacker could obtain privileges that are the same level as an administrative user but it depends on the crafted credentials. Note: This vulnerability exists because of a non-default device configuration that must be present for it to be exploitable. For details about the vulnerable configuration, see the Vulnerable Products section of this advisory.
Which versions are affected by CVE-2022-20695?
It affects 2 products.
Products include Cisco Wireless Lan Controller 8.10.151.0, Cisco Wireless Lan Controller 8.10.162.0.
How do I fix CVE-2022-20695?
No fix has been published for CVE-2022-20695 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-20695 being exploited?
There is no known exploitation of CVE-2022-20695 in the wild and no public exploit code.
Sources
Also known as GHSA-2cxv-rmxp-hvp9.