8.6
High
CVE-2023-20226 A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE…
Description
A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to the mishandling of a crafted packet stream through the AppQoE or UTD application. An attacker could exploit this vulnerability by sending a crafted packet stream through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco IOS XE Software 17.10 | 17.10.1a → 17.10.1 | No fix stated |
| Cisco IOS XE Software 17.9 | 17.9.1a → 17.9.2 | No fix stated |
| Cisco IOS XE Software 17.8 | 17.8.1a → 17.8.1 | No fix stated |
| Cisco IOS XE Software 17.7 | 17.7.1a → 17.7.2 | No fix stated |
References
- cisco-sa-appqoe-utd-dos-p8O57p5y sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco IOS XE Software
The 248 CVEs of Cisco IOS XE Software →
CVE-2026-20311
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote…
6.3
Medium
CVE-2026-20301
A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of…
8.6
High
CVE-2026-20308
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote…
4.3
Medium
CVE-2026-20273
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering…
8.6
High