CVE-2023-20003
Cisco Business Wireless Access Points Social Login Guest User Authentication Bypass Vulnerability
- State
- Published
- Severity
- 4.7 Medium
- Published
- May 18, 2023
- Updated
- Oct 25, 2024
- Reserved
- Oct 27, 2022
Description
A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points (APs) could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error with the social login implementation. An attacker could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to access the Guest Portal without authentication.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.7 Medium | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N | cisco |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Cisco Business Wireless Access Point SoftwareCisco |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.