4.7 Moyenne

CVE-2022-20728 A vulnerability in the client forwarding code of multiple Cisco Access Points (APs) could allow an unauthenticated,…

Description

A vulnerability in the client forwarding code of multiple Cisco Access Points (APs) could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards packets that are destined to a wireless client if they are received on the native VLAN. An attacker could exploit this vulnerability by obtaining access to the native VLAN and directing traffic directly to the client through their MAC/IP combination. A successful exploit could allow the attacker to bypass VLAN separation and potentially also bypass any Layer 3 protection mechanisms that are deployed.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco Aironet Access Point Software (IOS XE Controller)	Versions non publiées

Références

20220927 Cisco Access Points VLAN Bypass from Native VLAN Vulnerability tools.cisco.com

Chronologie

Publiée 30 septembre 2022
Dernière modification 6 novembre 2024

Les 11 CVE de Cisco Aironet Access Point Software (IOS XE Controller) →

CVE-2025-20365 A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an… 4.3 Moyenne CVE-2025-20364 A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow… 4.3 Moyenne CVE-2024-20418 A vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco… 10.0 Critique CVE-2024-20271 A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote… 8.6 Élevée

Suivre cette CVE