CVE-2023-20268
published 2023-09-27CVE-2023-20268: A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust…
PriorityP422medium4.7CVSS 3.1
AVAACLPRNUINSCCNINAL
EPSS
0.24%
14.5th percentile
A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device.
This vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic.
Affected
187 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | access_point | — | — |
| cisco | business_150ax_firmware | < 10.6.2.0 | 10.6.2.0 |
| cisco | business_151axm_firmware | < 10.6.2.0 | 10.6.2.0 |
| cisco | catalyst_9800_embedded_wireless_controller_firmware | < 17.3.8 | 17.3.8 |
| cisco | catalyst_9800_embedded_wireless_controller_firmware | >= 17.4.0 < 17.6.6 | 17.6.6 |
| cisco | catalyst_9800_embedded_wireless_controller_firmware | >= 17.8.0 < 17.9.4 | 17.9.4 |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
CVSS provenance
nvdv3.14.7MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
vendor_cisco4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability
vendor_cisco·2023-09-27·CVSS 4.7
CVE-2023-20268 [MEDIUM] CWE-400 Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability
Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability
A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device.
This vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic.
Cisco has released software updates that address th
Cisco
Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability
vendor_cisco·CVSS 3.1
CVE-2023-20268 Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability
CVE-2023-20268: Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability
A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device. This vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic. Cisco has released software updates th
GHSA
GHSA-p572-r8g2-hv9h: A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaus
ghsa_unreviewed·2023-09-27
CVE-2023-20268 [MEDIUM] CWE-400 GHSA-p572-r8g2-hv9h: A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaus
A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device.
This vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-09-27
Published