CVE-2023-20268

CWE-400 — Uncontrolled Resource Consumption4 documents4 sources
Severity
4.7MEDIUM
EPSS
0.0%
top 88.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Cisco Business 150ax FirmwareCisco Business 151axm FirmwareCisco Catalyst 9800 Embedded Wireless Controller Firmware+4 more
Timeline
PublishedSep 27

Description

A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device. This vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A…

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:LExploitability: 2.8 | Impact: 1.4

Affected Packages7 packages

▶CVEListV5cisco/cisco_aironet_access_point_software105 versions+104

🔴Vulnerability Details

2
CVEList
Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability↗2023-09-27
▶
GHSA
GHSA-p572-r8g2-hv9h: A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaus↗2023-09-27
▶

📋Vendor Advisories

1
Cisco
Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability↗2023-09-27
▶
CVE-2023-20268 (MEDIUM CVSS 4.7) | A vulnerability in the packet proce | cvebase.io