Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2023-20176

A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service.

Description

A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service. This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an affected device as a wireless client and sending a high rate of traffic over an extended period of time. A successful exploit could allow the attacker to cause the Datagram TLS (DTLS) session to tear down and reset, causing a denial of service (DoS) condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Aironet Access Point Software

  • 8.10.170.0affected

Cisco Cisco Aironet Access Point Software (IOS XE Controller)

  • 16.10.1eaffected
  • 16.10.1affected
  • 17.1.1taffected
  • 17.1.1saffected
  • 17.1.1affected
  • 16.11.1aaffected
  • 16.11.1affected
  • 16.11.1caffected
  • 16.11.1baffected
  • 16.12.1saffected
  • 16.12.4affected
  • 16.12.1affected
  • 16.12.2saffected
  • 16.12.1taffected
  • 16.12.4aaffected
  • 16.12.5affected
  • 16.12.3affected
  • 16.12.6affected
  • 16.12.8affected
  • 16.12.7affected
  • 16.12.6aaffected
  • 17.3.1affected
  • 17.3.2aaffected
  • 17.3.3affected
  • 17.3.2affected
  • 17.3.4caffected
  • 17.3.5aaffected
  • 17.3.6affected
  • 17.2.1affected
  • 17.2.1aaffected
  • 17.2.3affected
  • 17.2.2affected
  • 17.5.1affected
  • 17.4.1affected
  • 17.4.2affected
  • 17.6.1affected
  • 17.6.2affected
  • 17.6.3affected
  • 17.6.4affected
  • 17.6.5affected
  • 17.7.1affected
  • 17.8.1affected

References