CVE-2023-20100 — Use of Multiple Resources with Duplicate Identifier in Cisco IOS XE Software
Severity
6.8MEDIUMNVD
EPSS
1.1%
top 22.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 23
Latest updateJul 7
Description
A vulnerability in the access point (AP) joining process of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a logic error that occurs when certain conditions are met during the AP joining process. An attacker could exploit this vulnerability by adding an AP that is und…
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:HExploitability: 2.2 | Impact: 4.0
Affected Packages2 packages
🔴Vulnerability Details
2GHSA▶
GHSA-hgvf-mqv4-fv8v: A vulnerability in the access point (AP) joining process of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol of Cisco IOS XE S↗2023-03-23
CVEList▶
Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability↗2023-03-23
💥Exploits & PoCs
1Exploit-DB▶
Microsoft Outlook Microsoft 365 MSO (Version 2306 Build 16.0.16529.20100) 32-bit - Remote Code Execution↗2023-07-07
📋Vendor Advisories
1Cisco▶
Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability↗2023-03-22