Integer overflow in Cisco Systems, Inc products - CVE-2022-20684

Vulnerability identifier: #VU62323

CSH Severity: Low

CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-20684

CWE-ID: CWE-190

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to integer overflow in Simple Network Management Protocol (SNMP) trap generation for wireless clients. A remote attacker on the local network can pass specially crafted data to the application, trigger integer overflow and cause a denial of service condition on the target system.

Catalyst 9800 Embedded Wireless Controller
Catalyst 9300 Series Switches
Catalyst 9400 Series Switches
Catalyst 9500 Series Switches
Catalyst 9800 Series Wireless Controllers
Catalyst 9800-CL Wireless Controllers for Cloud
Embedded Wireless Controller on Catalyst Access Points
Cisco IOS XE

Install updates from vendor's website.

Cisco IOS XE - addressed in versions Amsterdam 17.2.1, Amsterdam 17.2.1r, Amsterdam 17.3.1, 16.12.3, 16.12.3s, 16.12.3a, 16.12.4, 16.12.4a, 16.12.5, 16.12.5a, 16.12.5 b, 16.12.6, 16.12.6a, 16.12.7, 17.2.1, 17.2.1v, 17.2.1a, 17.2.1r, 17.2.2, 17.2.3, 17.3.0.42, 17.3.1, 17.3.1w, 17.3.1x, 17.3.1a, 17.3.2, 17.3.2a, 17.3.3, 17.3.4, 17.3.4c, 17.3.4a, 17.3.4 b, 17.3.5, 17.3.5a, 17.4.1, 17.4.1a, 17.4.1b, 17.4.2, 17.5.1, 17.5.1a, 17.6.1, 17.6.1a, 17.6.2, 17.6.3, 17.7.1, 17.7.1a

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-snmp-trap-dos-mjent3Ey

• Denial of service in Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family