Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2023-20202

A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause a den

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper memory management. An attacker could exploit this vulnerability by sending a series of network requests to an affected device. A successful exploit could allow the attacker to cause the wncd process to consume available memory and eventually cause the device to reload, resulting in a DoS condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco IOS XE Software

  • 17.10.1affected
  • 17.10.1aaffected
  • 17.10.1baffected
  • 17.9.1affected
  • 17.9.1waffected
  • 17.9.2affected
  • 17.9.1aaffected
  • 17.9.1xaffected
  • 17.9.1yaffected
  • 17.9.2aaffected
  • 17.9.1x1affected

References