Lucene search

K
cvelistCiscoCVELIST:CVE-2023-20003
HistoryMay 18, 2023 - 12:00 a.m.

CVE-2023-20003 Cisco Business Wireless Access Points Social Login Guest User Authentication Bypass Vulnerability

2023-05-1800:00:00
CWE-288
cisco
www.cve.org
5
cve-2023-20003
cisco
business wireless access points
social login
guest user authentication
vulnerability
logic error
guest portal

CVSS3

4.7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

32.6%

A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points (APs) could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error with the social login implementation. An attacker could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to access the Guest Portal without authentication.

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco Business Wireless Access Point Software ",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

CVSS3

4.7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

32.6%

Related for CVELIST:CVE-2023-20003