Cisco Wireless LAN Controller Authentication Bypass (cisco-sa-wlc-auth-bypass-JRNhV4fF)

critical Nessus Plugin ID 160089

Synopsis

The remote device is missing a vendor-supplied security patch

Description

An authentication bypass vulnerability exists in the authentication functionality of Cisco Wireless LAN Controller (WLC) due to the improper implementation of the password validation algorithm. An unauthenticated, remote attacker can exploit this by logging in to an affected device with crafted credentials, to bypass authentication and execute arbitrary actions with administrator privileges.

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

Solution

Upgrade to the relevant fixed version referenced in Cisco bug ID CSCwa43249

See Also

http://www.nessus.org/u?5f3d9738

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwa43249

Plugin Details

Severity: Critical

ID: 160089

File Name: cisco-sa-wlc-auth-bypass-JRNhV4fF.nasl

Version: 1.8

Type: combined

Family: CISCO

Published: 4/22/2022

Updated: 5/14/2024

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.5

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2022-20695

CVSS v3

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:cisco:wireless_lan_controller_software, cpe:/h:cisco:wireless_lan_controller

Required KB Items: Settings/ParanoidReport, Host/Cisco/WLC/Version, Host/Cisco/WLC/Port

Exploit Ease: No known exploits are available

Patch Publication Date: 4/13/2022

Vulnerability Publication Date: 4/13/2022

Reference Information

CVE: CVE-2022-20695

CWE: 303

CISCO-SA: cisco-sa-wlc-auth-bypass-JRNhV4fF

IAVA: 2022-A-0174-S

CISCO-BUG-ID: CSCwa43249