4.7 Moyenne

CVE-2023-20003 A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points…

Description

A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points (APs) could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error with the social login implementation. An attacker could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to access the Guest Portal without authentication.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco Business Wireless Access Point Software	Versions non publiées

Références

20230517 Cisco Business Wireless Access Points Social Login Guest User Authentication Bypass Vulnerability sec.cloudapps.cisco.com

Chronologie

Publiée 18 mai 2023
Dernière modification 25 octobre 2024

Les 18 CVE de Cisco Business Wireless Access Point Software →

CVE-2024-20271 A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote… 8.6 Élevée CVE-2024-20265 A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical… 5.9 Moyenne CVE-2024-20336 A vulnerability in the web-based user interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could… 6.5 Moyenne CVE-2024-20335 A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs… 6.5 Moyenne

Suivre cette CVE