A vulnerability in the Simple Network Management Protocol (SNMP) of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an authenticated, remote attacker to access sensitive information. This vulnerability is due to insufficient restrictions that allow a sensitive configuration detail to be disclosed. An attacker could exploit this vulnerability by retrieving data through SNMP read-only community access. A successful exploit could allow the attacker to view Service Set Identifier (SSID) preshared keys (PSKs) that are configured on the affected device.
References
| Link | Resource |
|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cwlc-snmpidv-rnyyQzUZ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
27 Oct 2022, 15:47
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:cisco:ios_xe:-:*:*:*:*:*:*:* |
04 Oct 2022, 19:18
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:cisco:ios_xe:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_9800-cl:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_9800_embedded_wireless_controller:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_9800-80_wireless_controller:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_9800-l-f:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_9800-40:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_9800-80:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_9800-40_wireless_controller:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_9800-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_9800-l-c:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_9800:-:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| References | (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cwlc-snmpidv-rnyyQzUZ - Vendor Advisory | |
| First Time |
Cisco catalyst 9800
Cisco catalyst 9800-80 Wireless Controller Cisco catalyst 9800-l-f Cisco Cisco catalyst 9800-l-c Cisco catalyst 9800-80 Cisco catalyst 9800-40 Wireless Controller Cisco catalyst 9800 Embedded Wireless Controller Cisco catalyst 9800-40 Cisco catalyst 9800-l Cisco catalyst 9800-cl Cisco ios Xe |
30 Sep 2022, 19:20
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-09-30 19:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-20810
Mitre link : CVE-2022-20810
CVE.ORG link : CVE-2022-20810
JSON object : View
Products Affected
cisco
- catalyst_9800-80_wireless_controller
- ios_xe
- catalyst_9800-40
- catalyst_9800-cl
- catalyst_9800-l-f
- catalyst_9800-l-c
- catalyst_9800_embedded_wireless_controller
- catalyst_9800-40_wireless_controller
- catalyst_9800-l
- catalyst_9800-80
- catalyst_9800
CWE