First published: Wed Sep 27 2023(Updated: )
A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device. This vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic.
Credit: ykramarz@cisco.com ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Wireless LAN Controller Software | <8.10.190.0 | |
Cisco Catalyst 9800 Embedded Wireless Controller Firmware | <17.3.8 | |
Cisco Catalyst 9800 Embedded Wireless Controller Firmware | >=17.4.0<17.6.6 | |
Cisco Catalyst 9800 Embedded Wireless Controller Firmware | >=17.8.0<17.9.4 | |
Cisco Catalyst 9800 Embedded Wireless Controller | ||
Cisco Business 150ax Firmware | <10.6.2.0 | |
Cisco Business 150ax | ||
Cisco Business 151axm Firmware | <10.6.2.0 | |
Cisco Business 151axm | ||
All of | ||
Any of | ||
Cisco Catalyst 9800 Embedded Wireless Controller Firmware | <17.3.8 | |
Cisco Catalyst 9800 Embedded Wireless Controller Firmware | >=17.4.0<17.6.6 | |
Cisco Catalyst 9800 Embedded Wireless Controller Firmware | >=17.8.0<17.9.4 | |
Cisco Catalyst 9800 Embedded Wireless Controller | ||
All of | ||
Cisco Business 150ax Firmware | <10.6.2.0 | |
Cisco Business 150ax | ||
All of | ||
Cisco Business 151axm Firmware | <10.6.2.0 | |
Cisco Business 151axm |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this vulnerability is CVE-2023-20268.
The severity of CVE-2023-20268 is medium with a CVSS score of 4.7.
CVE-2023-20268 affects Cisco access point (AP) software by allowing an unauthenticated, adjacent attacker to exhaust resources on an affected device.
The cause of CVE-2023-20268 is insufficient management of resources when handling certain types of traffic.
To fix CVE-2023-20268, it is recommended to update to a version of Cisco access point (AP) software that is not affected by the vulnerability.