Known vulnerabilities in Catalyst 9800 Series Wireless Controllers

Vendor: Cisco Systems, Inc
Software: Catalyst 9800 Series Wireless Controllers
Software CPE: cpe:2.3:h:cisco_systems:catalyst_9800_series_wireless_controllers:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 16
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Catalyst 9800 Series Wireless Controllers Catalyst 9800 Series Wireless Controllers is affected by 16 known vulnerabilities: 1 critical, 3 high, 5 medium, 7 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108832 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20186		 CWE-78 Medium
No
No
 - 09.05.2025 SB2025050932
#VU108827 - Uncontrolled Memory Allocation
CVE-2025-20140		 CWE-789 Medium
No
No
 - 09.05.2025 SB2025050929
#VU108779 - Use of Hard-coded Credentials
CVE-2025-20188		 CWE-798 Critical
No
No
 - 07.05.2025 SB2025050785
#VU97728 - Incorrect Authorization
CVE-2024-20510		 CWE-863 Low
No
No
 - 26.09.2024 SB2024092637
#VU87904 - Incomplete cleanup
CVE-2024-20303		 CWE-459 Low
No
No
 - 28.03.2024 SB2024032828
#VU81291 - Improper input validation
CVE-2023-20202		 CWE-20 Low
No
No
 - 29.09.2023 SB2023092938
#VU73986 - Improper input validation
CVE-2023-20067		 CWE-20 Low
No
No
 - 23.03.2023 SB2023032341
#VU73985 - Improper input validation
CVE-2023-20100		 CWE-20 Medium
No
No
 - 23.03.2023 SB2023032340
#VU71744 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20076		 CWE-78 Low
No
No
 - 01.02.2023 SB2023020156
#VU67734 - Improper control of a resource through its lifetime
CVE-2022-20856		 CWE-664 High
No
No
 - 29.09.2022 SB2022092916
#VU67725 - Exposure of sensitive information to an unauthorized actor
CVE-2022-20810		 CWE-200 Medium
No
No
 - 29.09.2022 SB2022092911
#VU62324 - Incorrect Privilege Assignment
CVE-2022-20681		 CWE-266 Low
No
No
 - 14.04.2022 SB2022041413
#VU62323 - Integer overflow
CVE-2022-20684		 CWE-190 Low
No
No
 - 14.04.2022 SB2022041412
#VU62322 - Buffer Underwrite ('Buffer Underflow')
CVE-2022-20683		 CWE-124 High
No
No
 - 14.04.2022 SB2022041411
#VU62321 - Unchecked Return Value
CVE-2022-20682		 CWE-252 High
No
No
 - 14.04.2022 SB2022041410
#VU62315 - Reachable Assertion
CVE-2022-20694		 CWE-617 Medium
No
No
 - 14.04.2022 SB2022041408