Vulnerability in Cisco Aironet_1542d
CVE-2022-20728
A vulnerability in the client forwarding code of multiple Cisco Access Points (APs) could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vuln…
EPSS: 0.002 (16.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N.
Affected products
- Cisco Aironet_1542d
- Cisco Aironet_1542d_firmware — versions 017.006\(001\)
- Cisco Aironet_1542i
- Cisco Aironet_1542i_firmware — versions 017.006\(001\)
- Cisco Aironet_1562d
- Cisco Aironet_1562d_firmware — versions 017.006\(001\)
- Cisco Aironet_1562e
- Cisco Aironet_1562e_firmware — versions 017.006\(001\)
- Cisco Aironet_1562i
- Cisco Aironet_1562i_firmware — versions 017.006\(001\)
Weakness classification (CWE)
Public proof-of-concept exploits
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-20728?
- CVE-2022-20728 is a medium-severity vulnerability in Cisco Aironet_1542d, classified under Improper Access Control. CVSS score: 4.7/10. Published 2022-09-30.
- How severe is CVE-2022-20728?
- Medium severity. CVSS v3 base score is 4.7 out of 10.
- Is CVE-2022-20728 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.