7.4
High
CVE-2023-20112 A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a…
Description
A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Aironet Access Point Software | Versions not published |
References
- 20230322 Cisco Access Point Software Association Request Denial of Service Vulnerability sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Aironet Access Point Software
The 29 CVEs of Cisco Aironet Access Point Software →
CVE-2024-20271
A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote…
8.6
High
CVE-2024-20265
A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical…
5.9
Medium
CVE-2024-20354
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow…
4.7
Medium
CVE-2023-20176
A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote…
5.8
Medium