CVE-2023-20268: Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability
First published: Wed Sep 27 2023(Updated: )
A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device. This vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Wireless LAN Controller (WLC) Software | <8.10.190.0 | |
| All of | ||
| Any of | ||
| Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family | <17.3.8 | |
| Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family | >=17.4.0<17.6.6 | |
| Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family | >=17.8.0<17.9.4 | |
| Cisco Embedded Wireless Controller with Catalyst Access Points Software | ||
| All of | ||
| Cisco Business 150AX Access Point firmware | <10.6.2.0 | |
| Cisco Business 150AX Access Point firmware | ||
| All of | ||
| Cisco Business 151AXM | <10.6.2.0 | |
| Cisco Business 151AXM Firmware | ||
| Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family | <17.3.8 | |
| Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family | >=17.4.0<17.6.6 | |
| Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family | >=17.8.0<17.9.4 | |
| Cisco Embedded Wireless Controller with Catalyst Access Points Software | ||
| Cisco Business 150AX Access Point firmware | <10.6.2.0 | |
| Cisco Business 150AX Access Point firmware | ||
| Cisco Business 151AXM | <10.6.2.0 | |
| Cisco Business 151AXM Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-20268.
What is the severity of CVE-2023-20268?
The severity of CVE-2023-20268 is medium with a CVSS score of 4.7.
How does CVE-2023-20268 affect Cisco access point (AP) software?
CVE-2023-20268 affects Cisco access point (AP) software by allowing an unauthenticated, adjacent attacker to exhaust resources on an affected device.
What is the cause of CVE-2023-20268?
The cause of CVE-2023-20268 is insufficient management of resources when handling certain types of traffic.
How can CVE-2023-20268 be fixed?
To fix CVE-2023-20268, it is recommended to update to a version of Cisco access point (AP) software that is not affected by the vulnerability.
- agent/type
- agent/severity
- agent/references
- agent/weakness
- agent/event
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/description
- agent/last-modified-date
- agent/source
- agent/author
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/softwarecombine
- vendor/cisco
- canonical/cisco wireless lan controller (wlc) software
- canonical/cisco ios xe wireless controller software for the catalyst 9000 family
- version/cisco ios xe wireless controller software for the catalyst 9000 family/17.4.0
- version/cisco ios xe wireless controller software for the catalyst 9000 family/17.8.0
- canonical/cisco embedded wireless controller with catalyst access points software
- canonical/cisco business 150ax access point firmware
- canonical/cisco business 151axm
- canonical/cisco business 151axm firmware