A vulnerability in IP ingress packet processing of the Cisco Embedded Wireless Controller with Catalyst Access Points Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service (DoS) condition. The device may experience a performance degradation in traffic processing or high CPU usage prior to the unexpected reload. This vulnerability is due to improper rate limiting of IP packets to the management interface. An attacker could exploit this vulnerability by sending a steady stream of IP traffic at a high rate to the management interface of the affected device. A successful exploit could allow the attacker to cause the device to reload.
References
| Link | Resource |
|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-ip-flood-dos-6hxxENVQ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
25 Apr 2022, 17:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-ip-flood-dos-6hxxENVQ - Vendor Advisory | |
| CWE | CWE-770 | |
| CPE | cpe:2.3:a:cisco:aironet_access_point_software:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : 7.8
v3 : 7.5 |
15 Apr 2022, 15:22
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-04-15 15:15
Updated : 2024-02-04 22:29
NVD link : CVE-2022-20622
Mitre link : CVE-2022-20622
CVE.ORG link : CVE-2022-20622
JSON object : View
Products Affected
cisco
- aironet_access_point_software
CWE
CWE-770
Allocation of Resources Without Limits or Throttling