CVE-2022-20769

Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability

State: Published
Severity: 7.4 High
Published: Sep 30, 2022
Updated: Nov 6, 2024
Reserved: Nov 2, 2021

Description

A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient error validation. An attacker could exploit this vulnerability by sending crafted packets to an affected device. A successful exploit could allow the attacker to cause the wireless LAN controller to crash, resulting in a DoS condition. Note: This vulnerability affects only devices that have Federal Information Processing Standards (FIPS) mode enabled.

Scores

CVSS	Score	Vector	Source
3.1	7.4 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	cisco

Weaknesses

CWE-787

Affected Products

Product	Versions
Cisco Wireless LAN Controller (WLC)Cisco	n/aAffected

References

20220928 Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerabilityvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.