Improper control of a resource through its lifetime in Cisco Systems, Inc products - CVE-2022-20856
Published: September 29, 2022
Vulnerability identifier: #VU67734
CSH Severity: High
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-20856
CWE-ID: CWE-664
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a logic error and improper management of resources in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) Mobility messages. A remote attacker can send specially crafted CAPWAP Mobility packets and perform a denial of service (DoS) attack.
Affected software
Catalyst 9800-CL Wireless Controllers for Cloud
Catalyst 9800 Embedded Wireless Controller
Catalyst 9800 Series Wireless Controllers
Cisco IOS XE
Catalyst 9800 Embedded Wireless Controller
Catalyst 9800 Series Wireless Controllers
Cisco IOS XE
How to mitigate CVE-2022-20856
Install updates from vendor's website.
Cisco IOS XE - addressed in versions 16.12.8, 17.3.5b, 17.3.6, 17.6.3, 17.6.3a, 17.6.4, 17.8.1, 17.8.1a, 17.9.1, 17.9.1a