High severity · published Sep 27, 2023
CVE-2023-20176
A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service
8.6
CVSS
0.9%
EPSS
No
On KEV
Description
A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service.
This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an affected device as a wireless client and sending a high rate of traffic over an extended period of time. A successful exploit could allow the attacker to cause the Datagram TLS (DTLS) session to tear down and reset, causing a denial of service (DoS) condition.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Cisco Aironet Access Point Software · Cisco
8.10.170.0 · source: vendor
CA
Cisco Aironet Access Point Software (IOS XE Controller) · Cisco
16.10.1e; 16.10.1; 17.1.1t; 17.1.1s; 17.1.1; 16.11.1a; +34 more · source: vendor
C9
Catalyst 9124 Firmware · Cisco
before 17.6.6 · source: NVD
C9
Catalyst 9130 Firmware · Cisco
before 17.6.6 · source: NVD
C9
Catalyst 9136 Firmware · Cisco
before 17.6.6 · source: NVD
C9
Catalyst 9164 Firmware · Cisco
before 17.6.6 · source: NVD
C9
Catalyst 9166 Firmware · Cisco
before 17.6.6 · source: NVD
Affected product
CA
Cisco Aironet Access Point Software
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-20176
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-20176
Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-click-ap-dos-wdcXkvnQ
More from Cisco Aironet Access Point Software
8.6
CVE-2024-20271
A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an…
7.4
CVE-2024-20354
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of…
6.7
CVE-2023-20097
Cisco Access Point Software Command Injection Vulnerability
6.5
CVE-2023-20112
Cisco Access Point Software Association Request Denial of Service Vulnerability
5.9
CVE-2024-20265
A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a…