Skip to content
fr Sign in
5.8 Medium

CVE-2023-20176 A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote…

Description

A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service. This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an affected device as a wireless client and sending a high rate of traffic over an extended period of time. A successful exploit could allow the attacker to cause the Datagram TLS (DTLS) session to tear down and reset, causing a denial of service (DoS) condition.

Affected products and versions

Product Affected versions Fixed in
Cisco Aironet Access Point Software 8.10.170.0 No fix stated
Cisco Aironet Access Point Software (IOS XE Controller) 17.8.1 No fix stated
Cisco Aironet Access Point Software (IOS XE Controller) 17.7.1 No fix stated
Cisco Aironet Access Point Software (IOS XE Controller) 17.6 17.6.1 → 17.6.5 No fix stated
Cisco Aironet Access Point Software (IOS XE Controller) 17.5.1 No fix stated
Cisco Aironet Access Point Software (IOS XE Controller) 17.4 17.4.1 → 17.4.2 No fix stated
Cisco Aironet Access Point Software (IOS XE Controller) 17.3 17.3.1 → 17.3.6 No fix stated
Cisco Aironet Access Point Software (IOS XE Controller) 17.2 17.2.1a → 17.2.3 No fix stated
Cisco Aironet Access Point Software (IOS XE Controller) 17.1 17.1.1t → 17.1.1 No fix stated
Show the 3 other branches
Product Affected versions Fixed in
Cisco Aironet Access Point Software (IOS XE Controller) 16.12 16.12.1s → 16.12.8 No fix stated
Cisco Aironet Access Point Software (IOS XE Controller) 16.11 16.11.1c → 16.11.1 No fix stated
Cisco Aironet Access Point Software (IOS XE Controller) 16.10 16.10.1e → 16.10.1 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Aironet Access Point Software

The 29 CVEs of Cisco Aironet Access Point Software →
CVE-2024-20271 A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote… 8.6 High CVE-2024-20265 A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical… 5.9 Medium CVE-2024-20354 A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow… 4.7 Medium CVE-2023-20268 A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an… 4.7 Medium
Track this CVE