CVE-2022-20945CWE-120

Cisco Catalyst 9100 Series Access Points Association Request Denial of Service Vulnerability

High · published September 30, 2022

CVSS v3.1
7.4
EPSS
0%
Percentile
39.1
In the wild
Unconfirmed
What it is

A vulnerability in the 802.11 association frame validation of Cisco Catalyst 9100 Series Access Points (APs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of certain parameters within association request frames received by the AP. An attacker could exploit this vulnerability by sending a crafted 802.11 association request to a nearby device. An exploit could allow the attacker to unexpectedly reload the device, resulting in a DoS condition.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00462 · 39.1th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2022-09-30T18:46Z
EPSS history
Timeline
  • 30 SEP 18:46Z
    Cisco Catalyst 9100 Series Access Points Association Request Denial of Service Vulnerability
    cvelistv5