CVE-2023-20213: Medium severity cisco identity services engine (ise) vulnerability

Published Nov 1, 2023

Updated

A vulnerability in the CDP processing feature of Cisco ISE could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition of the CDP process on an affected device. This vulnerability is due to insufficient bounds checking when an affected device processes CDP traffic. An attacker could exploit this vulnerability by sending crafted CDP traffic to the device. A successful exploit could cause the CDP process to crash, impacting neighbor discovery and the ability of Cisco ISE to determine the reachability of remote devices. After a crash, the CDP process must be manually restarted using the cdp enable command in interface configuration mode.

Affected Software

25 affected components

Cisco Identity Services Engine=2.7.0

Cisco Identity Services Engine=2.7.0-patch1

Cisco Identity Services Engine=2.7.0-patch2

Cisco Identity Services Engine=2.7.0-patch3

Cisco Identity Services Engine=2.7.0-patch4

Cisco Identity Services Engine=2.7.0-patch5

Cisco Identity Services Engine=2.7.0-patch6

Cisco Identity Services Engine=2.7.0-patch7

Cisco Identity Services Engine=2.7.0-patch8

Cisco Identity Services Engine=2.7.0-patch9

Cisco Identity Services Engine=3.0.0

Cisco Identity Services Engine=3.0.0-patch1

Cisco Identity Services Engine=3.0.0-patch2

Cisco Identity Services Engine=3.0.0-patch3

Cisco Identity Services Engine=3.0.0-patch4

Cisco Identity Services Engine=3.0.0-patch5

Cisco Identity Services Engine=3.0.0-patch6

Cisco Identity Services Engine=3.1

Cisco Identity Services Engine=3.1-patch1

Cisco Identity Services Engine=3.1-patch2

Cisco Identity Services Engine=3.1-patch3

Cisco Identity Services Engine=3.1-patch4

Cisco Identity Services Engine=3.1-patch5

Cisco Identity Services Engine=3.2

Cisco Identity Services Engine=3.2-patch1

Event History

Nov 1, 2023

CVE Published

via MITRE·04:58 PM

Data Sourced

via MITRE·04:58 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-20213?

CVE-2023-20213 is a vulnerability in the CDP processing feature of Cisco ISE that could allow an unauthenticated adjacent attacker to cause a denial of service (DoS) condition.

What is the severity of CVE-2023-20213?

CVE-2023-20213 has a severity rating of 4.3 (medium).

How does CVE-2023-20213 affect Cisco Identity Services Engine (ISE)?

CVE-2023-20213 affects Cisco Identity Services Engine versions 2.7.0 to 2.7.0-patch9, 3.0.0 to 3.0.0-patch6, 3.1 to 3.1-patch5, and 3.2 to 3.2-patch1.

How can an attacker exploit CVE-2023-20213?

An attacker can exploit CVE-2023-20213 by sending specially crafted CDP traffic to the affected device.

Is there a fix for CVE-2023-20213?

Yes, Cisco has released patches to address CVE-2023-20213. Please refer to the Cisco Security Advisory for more information and to download the patches.