Vulnerability in Cisco Aironet 1542d
CVE-2022-20728
A vulnerability in the client forwarding code of multiple Cisco Access Points (APs) could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards packets that are destined to a wireless client if they are received on the native VLAN. An attacker could exploit this vulnerability by obtaining access to the native VLAN and directing traffic directly to the client through their MAC/IP combination. A successful exploit could allow the attacker to bypass VLAN separation and potentially also bypass any Layer 3 protection mechanisms that are deployed.
EPSS: 0.002 (16.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N.
Affected products
- Cisco Aironet_1542d
- Cisco Aironet_1542d_firmware — versions 017.006(001), 017.006\(001\)
- Cisco Aironet_1542i
- Cisco Aironet_1542i_firmware — versions 017.006(001), 017.006\(001\)
- Cisco Aironet_1562d
- Cisco Aironet_1562d_firmware — versions 017.006(001), 017.006\(001\)
- Cisco Aironet_1562e
- Cisco Aironet_1562e_firmware — versions 017.006(001), 017.006\(001\)
- Cisco Aironet_1562i
- Cisco Aironet_1562i_firmware — versions 017.006(001), 017.006\(001\)
Weakness classification (CWE)
Public proof-of-concept exploits
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-20728?
- CVE-2022-20728 is a medium-severity vulnerability in Cisco Aironet 1542d, classified under Improper Access Control. CVSS score: 4.7/10. Published 2022-09-30.
- How severe is CVE-2022-20728?
- Medium severity. CVSS v3 base score is 4.7 out of 10.
- Is CVE-2022-20728 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.