Out-of-bounds write in Cisco Systems, Inc products - CVE-2022-20769
Published: September 28, 2022
Vulnerability identifier: #VU67721
CSH Severity: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2022-20769
CWE-ID: CWE-787
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
2500 Series Wireless Controllers
3500 Series Wireless Controllers
8500 Series Wireless Controllers
Flex 7500 Series Wireless Controllers
Cisco 5500 Series Wireless Controllers
Cisco Wireless LAN Controller (WLC) AireOS Software
2500 Series Wireless Controllers
3500 Series Wireless Controllers
8500 Series Wireless Controllers
Flex 7500 Series Wireless Controllers
Cisco 5500 Series Wireless Controllers
Cisco Wireless LAN Controller (WLC) AireOS Software
Software vendor:
Cisco Systems, Inc
Cisco Systems, Inc
Description
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error when processing network packets with enabled Federal Information Processing Standards (FIPS) mode. A remote attacker can send specially crafted packets to the affected device, trigger an out-of-bounds write error and perform a denial of service (DoS) attack.
Remediation
Install updates from vendor's website.