CVE-2023-20268: Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability
A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device. This vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic.
Other sources
A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device. This vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-20268.
What is the severity of CVE-2023-20268?
The severity of CVE-2023-20268 is medium with a CVSS score of 4.7.
How does CVE-2023-20268 affect Cisco access point (AP) software?
CVE-2023-20268 affects Cisco access point (AP) software by allowing an unauthenticated, adjacent attacker to exhaust resources on an affected device.
What is the cause of CVE-2023-20268?
The cause of CVE-2023-20268 is insufficient management of resources when handling certain types of traffic.
How can CVE-2023-20268 be fixed?
To fix CVE-2023-20268, it is recommended to update to a version of Cisco access point (AP) software that is not affected by the vulnerability.