Description
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuration details including passwords. This vulnerability is due to improper privilege checks. An attacker could exploit this vulnerability by using the show and show tech wireless CLI commands to access configuration details, including passwords. A successful exploit could allow the attacker to access configuration details that they are not authorized to access.
References (1)
Core 1
Core References
Scores
CVSS v3
5.5
EPSS
0.0007
EPSS Percentile
21.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-274
Status
published
Products (50)
cisco/ios_xe
16.10.1
cisco/ios_xe
16.10.1e
cisco/ios_xe
16.10.1s
cisco/ios_xe
16.11.1
cisco/ios_xe
16.11.1a
cisco/ios_xe
16.11.1b
cisco/ios_xe
16.11.2
cisco/ios_xe
16.12.1
cisco/ios_xe
16.12.1s
cisco/ios_xe
16.12.1t
... and 40 more
Published
Mar 27, 2024
Tracked Since
Feb 18, 2026