{"uuid": "3ad8811b-b899-42e9-a828-fe860c44ce4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20695", "type": "seen", "source": "https://t.me/hacking_Attack/50280", "content": "Black Hat Ethical Hacking\nCisco vulnerability lets hackers craft their own login credentials\n\nCisco vulnerability lets hackers craft their own login credentialsPost Views: 110 \nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/patreon-300x61.png https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-2.png Subscribe to Patreon to watch this episode.\nReading Time: 2 Minutes\nThe Cisco security flaw allows remote attackers to log in to target devices through the management interface without using a valid password.\nCisco has released a security advisory to warn about a critical vulnerability (CVSS v3 score: 10.0), tracked as CVE-2022-20695, impacting the Wireless LAN Controller (WLC) software. \n\nThe bug involves the improper implementation of the password validation algorithm, making it possible to bypass the standard authentication procedure on non-default device configurations.\n\nIf this prerequisite is present, the attacker may use crafted credentials to gain varying levels of privilege, potentially going all the way up to an administrative user.\nSee Also: Complete Offensive Security and Ethical Hacking Course\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Impact and remediationAccording to Cisco\u2019s advisory, the products affected by this flaw are those that run Cisco WLC Software 8.10.151.0 or Release 8.10.162.0 and have \u201cmacfilter radius compatibility\u201d configured as \u201cOther.\u201d\n\nThe affected products are:\n\n* 3504 Wireless Controller\n* 5520 Wireless Controller\n* 8540 Wireless Controller\n* Mobility Express\n* Virtual Wireless Controller (vWLC)\n\nIn addition to the above, some customers using the following builds not available through the Software Center should also consider themselves vulnerable: 8.10.151.4 to 8.10.151.10 and 8.10.162.1 to 8.10.162.14.\n\nFinally, Cisco has confirmed the following as not vulnerable to CVE-2022-20695:\n\n* Catalyst 9800 Embedded Wireless Controller for Catalyst 9300, 9400, and 9500 Series Switches\n* Catalyst 9800 Series Wireless Controllers\n* Catalyst 9800 Wireless Controller for Cloud\n* Embedded Wireless Controller on Catalyst Access Points\n* Wireless LAN Controller (WLC) AireOS products not listed in the Vulnerable Products section\n\nTo determine if your configuration is vulnerable, issue the \u201cshow macfilter summary\u201d command. If the RADIUS compatibility mode returns \u201cOther,\u201d you\u2019re vulnerable to attacks.\nhttps://www.bleepstatic.com/images/news/u/1220909/Code%20and%20Details/check.jpg \n<figcaptionCommand to determine configuration vulnerability\n(Cisco) \nApplying the latest available security updates\u00a0(8.10.171.0 or later) released by Cisco addresses this vulnerability no matter what configuration you\u2019re using.\nSee Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH Possible workaroundsCisco has provided two possible workarounds for those who can\u2019t update the Wireless LAN Controller.\n\nThe first option is to reset the \u201cmacfilter radius compatibility\u201d mode to the default value by issuing the following command: \u201cconfig macfilter radius-compat cisco\u201d.\n\nThe second option would be to change the configuration to other safe modes, such as \u201cfree\u201d, using this command: \u201cconfig macfilter radius-compat free\u201d.\n\nAt the time of writing this, Cisco is not aware of the vulnerability being under active exploitation, and Bleeping Computer has seen no reports about scanning attempts either.\nSee Also: Recon Tool: Smap Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your id[...]", "creation_timestamp": "2026-09-01T20:01:43.998639Z"}