7.4 High

CVE-2022-20945 A vulnerability in the 802.11 association frame validation of Cisco Catalyst 9100 Series Access Points (APs) could allow…

Description

A vulnerability in the 802.11 association frame validation of Cisco Catalyst 9100 Series Access Points (APs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of certain parameters within association request frames received by the AP. An attacker could exploit this vulnerability by sending a crafted 802.11 association request to a nearby device. An exploit could allow the attacker to unexpectedly reload the device, resulting in a DoS condition.

Affected products and versions

Product	Affected versions	Fixed in
Cisco Aironet Access Point Software (IOS XE Controller)	Versions not published

References

20220928 Cisco Catalyst 9100 Series Access Points Association Request Denial of Service Vulnerability tools.cisco.com

Timeline

Published September 30, 2022
Last modified November 1, 2024

The 11 CVEs of Cisco Aironet Access Point Software (IOS XE Controller) →

CVE-2025-20365 A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an… 4.3 Medium CVE-2025-20364 A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow… 4.3 Medium CVE-2024-20418 A vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco… 10.0 Critical CVE-2024-20271 A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote… 8.6 High

Track this CVE