CVE-2022-20810

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Information Disclosure Vulnerability

MEDIUM

6.5

CVSS Score

Published: September 30, 2022 at 06:45 PM UTC

Updated: June 17, 2026 at 04:25 AM UTC

11 products affected across 1 vendorIOS XeCatalyst 9800-LCatalyst 9800-80

Using Cisco IOS XE Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco IOS XE Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.5

Exploit prediction

EPSS 0.8%

SSVC

No known exploit

Description

A vulnerability in the Simple Network Management Protocol (SNMP) of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an authenticated, remote attacker to access sensitive information. This vulnerability is due to insufficient restrictions that allow a sensitive configuration detail to be disclosed. An attacker could exploit this vulnerability by retrieving data through SNMP read-only community access. A successful exploit could allow the attacker to view Service Set Identifier (SSID) preshared keys (PSKs) that are configured on the affected device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS Xe · Cisco

95%

All versions

cisco-catalyst-9800 (environment) · cisco-catalyst-9800-40 (environment) · cisco-catalyst-9800-40-wireless-controller (environment) · cisco-catalyst-9800-80 (environment) · cisco-catalyst-9800-80-wireless-controller (environment) · cisco-catalyst-9800-cl (environment) · cisco-catalyst-9800-embedded-wireless-controller (environment) · cisco-catalyst-9800-l (environment) · cisco-catalyst-9800-l-c (environment) · cisco-catalyst-9800-l-f (environment)

Catalyst 9800 · Ciscodevice

80%

All versions

Catalyst 9800-40 · Ciscodevice

80%

All versions

Catalyst 9800-40 Wireless Controller · Ciscodevice

80%

All versions

Catalyst 9800-80 · Ciscodevice

80%

All versions