CVE-2023-20202
First published: Wed Sep 27 2023(Updated: )
A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper memory management. An attacker could exploit this vulnerability by sending a series of network requests to an affected device. A successful exploit could allow the attacker to cause the wncd process to consume available memory and eventually cause the device to reload, resulting in a DoS condition.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE | =17.9.1 | |
| Cisco IOS XE | =17.9.1a | |
| Cisco IOS XE | =17.9.1w | |
| Cisco IOS XE | =17.9.1x | |
| Cisco IOS XE | =17.9.1x1 | |
| Cisco IOS XE | =17.9.1y | |
| Cisco IOS XE | =17.9.2 | |
| Cisco IOS XE | =17.9.2a | |
| Cisco IOS XE | =17.9.2b | |
| Cisco IOS XE | =17.10.1 | |
| Cisco IOS XE | =17.10.1a | |
| Cisco IOS XE | =17.10.1b | |
| Cisco Catalyst 9105i | ||
| Cisco Catalyst 9105w | ||
| Cisco Catalyst 9115 | ||
| Cisco Catalyst 9120 | ||
| Cisco Catalyst 9124d | ||
| Cisco Catalyst 9124e | ||
| Cisco Catalyst 9124i | ||
| Cisco Catalyst 9130 | ||
| Cisco Catalyst 9136 | ||
| Cisco Catalyst 9162 | ||
| Cisco Catalyst 9164 | ||
| Cisco Catalyst 9166 | ||
| Cisco Catalyst 9166d1 | ||
| Cisco Catalyst 9800-40 | ||
| Cisco Catalyst 9800-80 | ||
| Cisco Catalyst 9800-cl | ||
| Cisco Catalyst 9800-l | ||
| Cisco Catalyst Iw6300 | ||
| Cisco Esw6300 | ||
| Cisco Iw9167eh-x-ap | ||
| Cisco Iw9167eh-x-urwb | ||
| Cisco Iw9167eh-x-wgb | ||
| Cisco Iw9167ih-x-ap | ||
| All of | ||
| Any of | ||
| Cisco IOS XE | =17.9.1 | |
| Cisco IOS XE | =17.9.1a | |
| Cisco IOS XE | =17.9.1w | |
| Cisco IOS XE | =17.9.1x | |
| Cisco IOS XE | =17.9.1x1 | |
| Cisco IOS XE | =17.9.1y | |
| Cisco IOS XE | =17.9.2 | |
| Cisco IOS XE | =17.9.2a | |
| Cisco IOS XE | =17.9.2b | |
| Cisco IOS XE | =17.10.1 | |
| Cisco IOS XE | =17.10.1a | |
| Cisco IOS XE | =17.10.1b | |
| Any of | ||
| Cisco Catalyst 9105i | ||
| Cisco Catalyst 9105w | ||
| Cisco Catalyst 9115 | ||
| Cisco Catalyst 9120 | ||
| Cisco Catalyst 9124d | ||
| Cisco Catalyst 9124e | ||
| Cisco Catalyst 9124i | ||
| Cisco Catalyst 9130 | ||
| Cisco Catalyst 9136 | ||
| Cisco Catalyst 9162 | ||
| Cisco Catalyst 9164 | ||
| Cisco Catalyst 9166 | ||
| Cisco Catalyst 9166d1 | ||
| Cisco Catalyst 9800-40 | ||
| Cisco Catalyst 9800-80 | ||
| Cisco Catalyst 9800-cl | ||
| Cisco Catalyst 9800-l | ||
| Cisco Catalyst Iw6300 | ||
| Cisco Esw6300 | ||
| Cisco Iw9167eh-x-ap | ||
| Cisco Iw9167eh-x-urwb | ||
| Cisco Iw9167eh-x-wgb | ||
| Cisco Iw9167ih-x-ap |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-20202?
CVE-2023-20202 is a vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers that could allow a denial of service (DoS) attack.
How does CVE-2023-20202 affect Cisco IOS XE Software?
CVE-2023-20202 affects Cisco IOS XE Software for Wireless LAN Controllers.
What is the severity of CVE-2023-20202?
CVE-2023-20202 has a severity rating of 6.1 (medium).
What is the cause of CVE-2023-20202?
CVE-2023-20202 is caused by improper memory management in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software.
How can I mitigate CVE-2023-20202?
To mitigate CVE-2023-20202, it is recommended to apply the necessary updates or patches provided by Cisco.
- collector/nvd-index
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/first-publish-date
- agent/event
- agent/description
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/cisco
- canonical/cisco ios xe
- version/cisco ios xe/17.9.1
- version/cisco ios xe/17.9.1a
- version/cisco ios xe/17.9.1w
- version/cisco ios xe/17.9.1x
- version/cisco ios xe/17.9.1x1
- version/cisco ios xe/17.9.1y
- version/cisco ios xe/17.9.2
- version/cisco ios xe/17.9.2a
- version/cisco ios xe/17.9.2b
- version/cisco ios xe/17.10.1
- version/cisco ios xe/17.10.1a
- version/cisco ios xe/17.10.1b
- canonical/cisco catalyst 9105i
- canonical/cisco catalyst 9105w
- canonical/cisco catalyst 9115
- canonical/cisco catalyst 9120
- canonical/cisco catalyst 9124d
- canonical/cisco catalyst 9124e
- canonical/cisco catalyst 9124i
- canonical/cisco catalyst 9130
- canonical/cisco catalyst 9136
- canonical/cisco catalyst 9162
- canonical/cisco catalyst 9164
- canonical/cisco catalyst 9166
- canonical/cisco catalyst 9166d1
- canonical/cisco catalyst 9800-40
- canonical/cisco catalyst 9800-80
- canonical/cisco catalyst 9800-cl
- canonical/cisco catalyst 9800-l
- canonical/cisco catalyst iw6300
- canonical/cisco esw6300
- canonical/cisco iw9167eh-x-ap
- canonical/cisco iw9167eh-x-urwb
- canonical/cisco iw9167eh-x-wgb
- canonical/cisco iw9167ih-x-ap