CVE-2023-20176

CWE-400 — Uncontrolled Resource Consumption4 documents4 sources

Severity

8.6HIGH

EPSS

0.1%

top 68.50%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Catalyst 9124 Firmware Cisco Catalyst 9130 Firmware Cisco Catalyst 9136 Firmware +4 more

Timeline

PublishedSep 27

Description

A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service. This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an affected device as a wireless client and sending a high rate of traffic over an extended period of time. A successful exploit could allow the attacker to cause the Datagram TLS (DTLS) session to tear …

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages7 packages

▶CVEListV5cisco/cisco_aironet_access_point_software8.10.170.0

▶CVEListV5cisco/cisco_aironet_access_point_software_(ios_xe_controller)42 versions+41

▶NVDcisco/catalyst_9124_firmware< 17.6.6

▶NVDcisco/catalyst_9130_firmware< 17.6.6

▶NVDcisco/catalyst_9136_firmware< 17.6.6

🔴Vulnerability Details

GHSA

GHSA-68hh-p8m2-hpx3: A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary d↗2023-09-27

▶

CVEList

CVE-2023-20176: A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary d↗2023-09-27

▶

📋Vendor Advisories

Cisco

Cisco Catalyst 9100 Access Points Denial of Service Vulnerability↗2023-09-27

▶