CVE-2022-20769

A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient error validation. An attacker could exploit this vulnerability by sending crafted packets to an affected device. A successful exploit could allow the attacker to cause the wireless LAN controller to crash, resulting in a DoS condition. Note: This vulnerability affects only devices that have Federal Information Processing Standards (FIPS) mode enabled.

• CWE-787
• CWE-787

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-dos-mKGRrsCBVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-dos-mKGRrsCBVendor Advisory

Published

Sep 30, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20763A vulnerability in the login authorization components of Cis…8.8
• CVE-2022-20764Multiple vulnerabilities in the web engine of Cisco TelePres…8.1
• CVE-2022-20765A vulnerability in the web applications of Cisco UCS Directo…4.8
• CVE-2022-20766A vulnerability in the Cisco Discovery Protocol functio…5.3
• CVE-2022-20767A vulnerability in the Snort rule evaluation function of Cis…7.5
• CVE-2022-20768A vulnerability in the logging component of Cisco TelePresen…4.9
• CVE-2022-2077Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-20770On April 20, 2022, the following vulnerability in the ClamAV…7.5
• CVE-2022-20771On April 20, 2022, the following vulnerability in the ClamAV…7.5
• CVE-2022-20772A vulnerability in Cisco Email Security Appliance (ESA) and …5.3
• CVE-2022-20773A vulnerability in the key-based SSH authentication mechanis…7.5
• CVE-2022-20774A vulnerability in the web-based management interface of Cis…8.1