Sign-up

ID

VAR-202209-1731


CVE

CVE-2022-20728


TITLE

Vulnerabilities in multiple Cisco Systems products

Trust: 0.8

sources: JVNDB: JVNDB-2022-018195

DESCRIPTION

A vulnerability in the client forwarding code of multiple Cisco Access Points (APs) could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards packets that are destined to a wireless client if they are received on the native VLAN. An attacker could exploit this vulnerability by obtaining access to the native VLAN and directing traffic directly to the client through their MAC/IP combination. A successful exploit could allow the attacker to bypass VLAN separation and potentially also bypass any Layer 3 protection mechanisms that are deployed. Cisco Aironet 1542d series firmware, Cisco Aironet 1542i series firmware, Cisco Aironet 1562i Unspecified vulnerabilities exist in multiple Cisco Systems products, including series firmware.Information may be tampered with

Trust: 1.71

sources: NVD: CVE-2022-20728 // JVNDB: JVNDB-2022-018195 // VULMON: CVE-2022-20728

AFFECTED PRODUCTS

vendor:ciscomodel:aironet 1542dscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 2800escope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 3800escope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 1815iscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 1815mscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:catalyst 9120axscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 1562dscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:catalyst 9124axscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 3800pscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 1815wscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 2800iscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:catalyst iw6300scope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 3800iscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:catalyst 9117axscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:catalyst 9130axscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:catalyst 9105axscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 1830scope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 1850escope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:catalyst 9115axscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 1815tscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 4800scope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 1542iscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 1562iscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 1850iscope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 1840scope:eqversion:017.006\(001\)

Trust: 1.0

vendor:ciscomodel:aironet 1562escope:eqversion:017.006\(001\)

Trust: 1.0

vendor:シスコシステムズmodel:cisco aironet 1850i シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 1562d シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 4800 シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 1840 シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 1815w シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 1562e シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 1542i シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 1542d シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 1815m シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 3800e シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco catalyst 9105ax シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 3800i シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 1830 シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 1850e シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 3800p シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 1815i シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 2800i シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 2800e シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 1815t シリーズscope: - version: -

Trust: 0.8

vendor:シスコシステムズmodel:cisco aironet 1562i シリーズscope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2022-018195 // NVD: CVE-2022-20728

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD: CVE-2022-20728
value: MEDIUM

Trust: 1.8

ykramarz@cisco.com: CVE-2022-20728
value: MEDIUM

Trust: 1.0

CNNVD: CNNVD-202209-2793
value: MEDIUM

Trust: 0.6

NVD:
baseSeverity: MEDIUM
baseScore: 4.7
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
attackVector: ADJACENT_NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: NONE
exploitabilityScore: 2.8
impactScore: 1.4
version: 3.1

Trust: 2.0

NVD: CVE-2022-20728
baseSeverity: MEDIUM
baseScore: 4.7
vectorString: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
attackVector: ADJACENT NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2022-018195 // NVD: CVE-2022-20728 // NVD: CVE-2022-20728 // CNNVD: CNNVD-202209-2793

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

problemtype:others (CWE-Other) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2022-018195 // NVD: CVE-2022-20728

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-202209-2793

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202209-2793

CONFIGURATIONS

sources:
            
            
            NVD: CVE-2022-20728

PATCH
title:cisco-sa-apvlan-TDTtb4FYurl:https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-apvlan-tdttb4fy
Trust: 0.8
title:Cisco Access Points Security vulnerabilitiesurl:http://123.124.177.30/web/xxk/bdxqbyid.tag?id=209666
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2022-018195 // 
            
            
            
            CNNVD: CNNVD-202209-2793

EXTERNAL IDS
db:NVDid:CVE-2022-20728
Trust: 3.3
db:JVNDBid:JVNDB-2022-018195
Trust: 0.8
db:AUSCERTid:ESB-2022.4806
Trust: 0.6
db:CNNVDid:CNNVD-202209-2793
Trust: 0.6
db:VULMONid:CVE-2022-20728
Trust: 0.1
sources:
            
            
            VULMON: CVE-2022-20728 // 
            
            
            
            JVNDB: JVNDB-2022-018195 // 
            
            
            
            NVD: CVE-2022-20728 // 
            
            
            
            CNNVD: CNNVD-202209-2793

REFERENCES
url:https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-apvlan-tdttb4fy
Trust: 2.3
url:https://nvd.nist.gov/vuln/detail/cve-2022-20728
Trust: 0.8
url:https://www.auscert.org.au/bulletins/esb-2022.4806
Trust: 0.6
url:https://cxsecurity.com/cveshow/cve-2022-20728/
Trust: 0.6
url:https://vigilance.fr/vulnerability/cisco-aironet-catalyst-access-point-ingress-filtrering-bypass-via-vlan-bypass-39379
Trust: 0.6
url:https://nvd.nist.gov
Trust: 0.1
sources:
            
            
            VULMON: CVE-2022-20728 // 
            
            
            
            JVNDB: JVNDB-2022-018195 // 
            
            
            
            NVD: CVE-2022-20728 // 
            
            
            
            CNNVD: CNNVD-202209-2793

SOURCES
db:VULMONid:CVE-2022-20728
db:JVNDBid:JVNDB-2022-018195
db:NVDid:CVE-2022-20728
db:CNNVDid:CNNVD-202209-2793

LAST UPDATE DATE
2023-12-18T13:06:29.953000+00:00

SOURCES UPDATE DATE
db:VULMONid:CVE-2022-20728date:2022-09-30T00:00:00
db:JVNDBid:JVNDB-2022-018195date:2023-10-19T02:23:00
db:NVDid:CVE-2022-20728date:2023-11-07T03:42:45.823
db:CNNVDid:CNNVD-202209-2793date:2022-10-08T00:00:00

SOURCES RELEASE DATE
db:VULMONid:CVE-2022-20728date:2022-09-30T00:00:00
db:JVNDBid:JVNDB-2022-018195date:2023-10-19T00:00:00
db:NVDid:CVE-2022-20728date:2022-09-30T19:15:10.903
db:CNNVDid:CNNVD-202209-2793date:2022-09-27T00:00:00