CVE-2023-20003
Cisco Business Wireless Access Points Social Login Guest User Authentication Bypass Vulnerability
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points (APs) could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error with the social login implementation. An attacker could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to access the Guest Portal without authentication.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-10-27 CVE Reserved
- 2023-05-18 CVE Published
- 2024-10-25 CVE Updated
- 2024-10-28 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-288: Authentication Bypass Using an Alternate Path or Channel
- CWE-306: Missing Authentication for Critical Function
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Business 140ac Access Point Firmware Search vendor "Cisco" for product "Business 140ac Access Point Firmware" | < 10.8.1.0 Search vendor "Cisco" for product "Business 140ac Access Point Firmware" and version " < 10.8.1.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Business 140ac Access Point Search vendor "Cisco" for product "Business 140ac Access Point" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Business 141acm Firmware Search vendor "Cisco" for product "Business 141acm Firmware" | < 10.8.1.0 Search vendor "Cisco" for product "Business 141acm Firmware" and version " < 10.8.1.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Business 141acm Search vendor "Cisco" for product "Business 141acm" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Business 142acm Firmware Search vendor "Cisco" for product "Business 142acm Firmware" | < 10.8.1.0 Search vendor "Cisco" for product "Business 142acm Firmware" and version " < 10.8.1.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Business 142acm Search vendor "Cisco" for product "Business 142acm" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Business 143acm Firmware Search vendor "Cisco" for product "Business 143acm Firmware" | < 10.8.1.0 Search vendor "Cisco" for product "Business 143acm Firmware" and version " < 10.8.1.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Business 143acm Search vendor "Cisco" for product "Business 143acm" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Business 151axm Firmware Search vendor "Cisco" for product "Business 151axm Firmware" | 10.4.2 Search vendor "Cisco" for product "Business 151axm Firmware" and version "10.4.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Business 151axm Search vendor "Cisco" for product "Business 151axm" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Business 145ac Access Point Firmware Search vendor "Cisco" for product "Business 145ac Access Point Firmware" | < 10.8.1.0 Search vendor "Cisco" for product "Business 145ac Access Point Firmware" and version " < 10.8.1.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Business 145ac Access Point Search vendor "Cisco" for product "Business 145ac Access Point" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Business 150ax Access Point Firmware Search vendor "Cisco" for product "Business 150ax Access Point Firmware" | 10.4.2 Search vendor "Cisco" for product "Business 150ax Access Point Firmware" and version "10.4.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Business 150ax Access Point Search vendor "Cisco" for product "Business 150ax Access Point" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Business 240ac Access Point Firmware Search vendor "Cisco" for product "Business 240ac Access Point Firmware" | < 10.8.1.0 Search vendor "Cisco" for product "Business 240ac Access Point Firmware" and version " < 10.8.1.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Business 240ac Access Point Search vendor "Cisco" for product "Business 240ac Access Point" | - | - |
Safe
|