Vulnerability in Cisco Aironet 1542d
CVE-2022-20728
A vulnerability in the client forwarding code of multiple Cisco Access Points (APs) could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards packets that are destined to a wireless client if they are received on the native VLAN. An attacker could exploit this vulnerability by obtaining access to the native VLAN and directing traffic directly to the client through their MAC/IP combination. A successful exploit could allow the attacker to bypass VLAN separation and potentially also bypass any Layer 3 protection mechanisms that are deployed.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N.
EPSS exploit prediction
EPSS: 0.003 (17.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 18th percentile — 17.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: +0.000
Affected products
- Cisco Aironet 1542d
- Cisco Aironet 1542d Firmware — versions 017.006(001), 017.006\(001\)
- Cisco Aironet 1542i
- Cisco Aironet 1542i Firmware — versions 017.006(001), 017.006\(001\)
- Cisco Aironet 1562d
- Cisco Aironet 1562d Firmware — versions 017.006(001), 017.006\(001\)
- Cisco Aironet 1562e
- Cisco Aironet 1562e Firmware — versions 017.006(001), 017.006\(001\)
- Cisco Aironet 1562i
- Cisco Aironet 1562i Firmware — versions 017.006(001), 017.006\(001\)
Weakness classification (CWE)
Public proof-of-concept exploits
References
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apvlan-T… (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-20728?
- CVE-2022-20728 is a medium-severity vulnerability in Cisco Aironet 1542d, classified under Improper Access Control. CVSS score: 4.7/10. Published 2022-09-30.
- How severe is CVE-2022-20728?
- Medium severity. CVSS v3 base score is 4.7 out of 10.
- Is CVE-2022-20728 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.