MEDIUM✓ PATCH🇬🇧 English

CVE-2022-20810

CVSS 6.5v3.1pub. 2022-09-30upd. 2024-11-21

A vulnerability in the Simple Network Management Protocol (SNMP) of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an authenticated, remote attacker to access sensitive information. This vulnerability is due to insufficient restrictions that allow a sensitive configuration detail to be disclosed. An attacker could exploit this vulnerability by retrieving data through SNMP read-only community access. A successful exploit could allow the attacker to view Service Set Identifier (SSID) preshared keys (PSKs) that are configured on the affected device.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

  • Cisco Catalyst 9800

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9800 40

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9800 40 Wireless Controller

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9800 80

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9800 80 Wireless Controller

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9800 Cl

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9800 Embedded Wireless Controller

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9800 L

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9800 L C

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9800 L F

    HW
    Cisco
    wszystkie wersje

  • Cisco IOS XE

    OS
    Cisco
    wszystkie wersje
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2023-20198CRITICAL10.0⚠ KEVten sam produkt

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in...

CVE-2018-0151CRITICAL9.8⚠ KEVten sam produkt

A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software coul...

CVE-2017-3881CRITICAL9.8⚠ KEVten sam produkt

A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE S...

CVE-2025-20363CRITICAL9.0PL ✓ten sam produkt

RCE w web services Cisco ASA, FTD, IOS, IOS XE, IOS XR przez HTTP

CVE-2025-20188CRITICAL10.0PL ✓ten sam produkt

Cisco IOS XE WLC — nieuwierzytelniony upload plików i RCE przez hardcoded JWT