Medium severity · published Sep 27, 2023
CVE-2023-20268
A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected…
4.7
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device.
This vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
B1
Business 150ax Firmware · Cisco
before 10.6.2.0 · source: NVD
B1
Business 151axm Firmware · Cisco
before 10.6.2.0 · source: NVD
C9
Catalyst 9800 Embedded Wireless Controller Firmware · Cisco
before 17.3.8; 17.4.0 before 17.6.6; 17.8.0 before 17.9.4 · source: NVD
WL
Wireless Lan Controller Software · Cisco
before 8.10.190.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-20268
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-20268
Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-dos-capwap-DDMCZS4m
More from Business 150ax Firmware
6.5
CVE-2023-20112
A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device
