4.7 Medium

CVE-2022-20728 A vulnerability in the client forwarding code of multiple Cisco Access Points (APs) could allow an unauthenticated,…

Description

A vulnerability in the client forwarding code of multiple Cisco Access Points (APs) could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards packets that are destined to a wireless client if they are received on the native VLAN. An attacker could exploit this vulnerability by obtaining access to the native VLAN and directing traffic directly to the client through their MAC/IP combination. A successful exploit could allow the attacker to bypass VLAN separation and potentially also bypass any Layer 3 protection mechanisms that are deployed.

Affected products and versions

Product	Affected versions	Fixed in
Cisco Aironet Access Point Software (IOS XE Controller)	Versions not published

References

20220927 Cisco Access Points VLAN Bypass from Native VLAN Vulnerability tools.cisco.com

Timeline

Published September 30, 2022
Last modified November 6, 2024

The 11 CVEs of Cisco Aironet Access Point Software (IOS XE Controller) →

CVE-2025-20365 A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an… 4.3 Medium CVE-2025-20364 A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow… 4.3 Medium CVE-2024-20418 A vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco… 10.0 Critical CVE-2024-20271 A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote… 8.6 High

Track this CVE