Riskcovery

CVE-2023-20268

Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability

State
Published
Severity
4.7 Medium
Published
Sep 27, 2023
Updated
Dec 12, 2024
Reserved
Oct 27, 2022

Read the record on cve.org

Description

A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device. 

This vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic.

Scores

CVSSScoreVectorSource
3.14.7 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Lcisco

Weaknesses

  • CWE-400 Uncontrolled Resource Consumption

Affected Products

ProductVersions
Cisco Aironet Access Point SoftwareCisco
  • 8.3.135.0Affected
  • 8.3.140.0Affected
  • 8.8.111.0Affected
  • 8.5.151.0Affected
  • 8.3.104.46Affected
  • 8.10.121.0Affected
  • 8.4.1.218Affected
  • 8.3.122.0Affected
  • 8.8.100.0Affected
  • 8.3.131.0Affected
  • 8.5.140.0Affected
  • 8.3.132.0Affected
  • 8.5.100.0Affected
  • 8.5.103.0Affected
  • 8.3.133.0Affected
  • 8.3.150.0Affected
  • 8.5.101.0Affected
  • 8.5.105.0Affected
  • 8.10.122.0Affected
  • 8.8.130.0Affected
  • 8.10.112.0Affected
  • 8.3.143.0Affected
  • 8.8.120.0Affected
  • 8.9.111.0Affected
  • 8.5.102.0Affected
  • and 80 more versions
Cisco Aironet Access Point Software (IOS XE Controller)Cisco
  • 17.1.1tAffected
  • 16.10.1sAffected
  • 16.10.1Affected
  • 17.3.1Affected
  • 16.11.1bAffected
  • 17.1.2Affected
  • 17.1.1Affected
  • 16.12.4Affected
  • 17.2.2Affected
  • 16.12.3Affected
  • 16.11.1aAffected
  • 16.12.2tAffected
  • 16.10.1eAffected
  • 16.11.1Affected
  • 16.11.1cAffected
  • 17.1.1sAffected
  • 16.12.3sAffected
  • 16.12.1sAffected
  • 16.12.1tAffected
  • 16.12.2sAffected
  • 17.2.1Affected
  • 17.2.1aAffected
  • 16.12.1Affected
  • 17.1.3Affected
  • 17.3.2aAffected
  • and 33 more versions
Cisco Business Wireless Access Point SoftwareCisco
  • 10.3.1.0Affected
  • 10.0.1.0Affected
  • 10.2.1.0Affected
  • 10.1.1.0Affected
  • 10.3.1.1Affected
  • 10.4.1.0Affected
  • 10.6.1.0Affected
  • 10.1.2.0Affected
  • 10.0.2.0Affected
  • 10.7.1.0Affected
  • 10.2.2.0Affected
  • 0.0.0.0Affected
  • 10.3.2.0Affected
  • 10.4.2.0Affected
  • 10.8.1.0Affected
  • 10.5.2.0Affected
  • 10.9.1.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.