Main Vulnerability Database Vulnerabilities #VU67721

Out-of-bounds write in Cisco Systems, Inc products - CVE-2022-20769

Published: September 28, 2022

Vulnerability identifier: #VU67721

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-20769

CWE-ID: CWE-787

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error when processing network packets with enabled Federal Information Processing Standards (FIPS) mode. A remote attacker can send specially crafted packets to the affected device, trigger an out-of-bounds write error and perform a denial of service (DoS) attack.

Affected software

2500 Series Wireless Controllers
3500 Series Wireless Controllers
8500 Series Wireless Controllers
Flex 7500 Series Wireless Controllers
Cisco 5500 Series Wireless Controllers
Cisco Wireless LAN Controller (WLC) AireOS Software

How to mitigate CVE-2022-20769

Install updates from vendor's website.

Cisco Wireless LAN Controller (WLC) AireOS Software - update to 8.10.171.0

External References

Related Security Bulletins