CVE-2020-3203: Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability
A vulnerability in the locally significant certificate (LSC) provisioning feature of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak that could lead to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain public key infrastructure (PKI) packets. An attacker could exploit this vulnerability by sending crafted Secure Sockets Layer (SSL) packets to an affected device. A successful exploit could cause an affected device to continuously consume memory, which could result in a memory allocation failure that leads to a crash and causes a DoS condition.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-3203?
CVE-2020-3203 is rated as high severity due to its potential to cause a denial of service.
How do I fix CVE-2020-3203?
To fix CVE-2020-3203, upgrade your Cisco Catalyst 9800 Series Wireless Controller to a fixed version of Cisco IOS XE Software.
Who is affected by CVE-2020-3203?
CVE-2020-3203 affects Cisco Catalyst 9800 Series Wireless Controllers running specific versions of Cisco IOS XE Software.
Can CVE-2020-3203 be exploited remotely?
Yes, CVE-2020-3203 can be exploited by unauthenticated remote attackers.
What kind of vulnerability is CVE-2020-3203?
CVE-2020-3203 is a memory leak vulnerability that can lead to denial of service.