cisco-sa-iosxe-ewlc-dos-TkuPVmZN: Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability
First published: Wed Jun 03 2020(Updated: )
A vulnerability in the locally significant certificate (LSC) provisioning feature of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak that could lead to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain public key infrastructure (PKI) packets. An attacker could exploit this vulnerability by sending crafted Secure Sockets Layer (SSL) packets to an affected device. A successful exploit could cause an affected device to continuously consume memory, which could result in a memory allocation failure that leads to a crash and causes a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ewlc-dos-TkuPVmZN This advisory is part of the June 3, 2020, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 23 Cisco Security Advisories that describe 25 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: June 2020 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers | ||
| Cisco IOS XE |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-iosxe-ewlc-dos-TkuPVmZN?
The severity of cisco-sa-iosxe-ewlc-dos-TkuPVmZN is classified as a high severity vulnerability due to its potential to cause denial of service.
How do I fix cisco-sa-iosxe-ewlc-dos-TkuPVmZN?
To fix cisco-sa-iosxe-ewlc-dos-TkuPVmZN, update to the latest version of Cisco IOS XE Software where the vulnerability has been patched.
What components are affected by cisco-sa-iosxe-ewlc-dos-TkuPVmZN?
cisco-sa-iosxe-ewlc-dos-TkuPVmZN affects Cisco Catalyst 9800 Series Wireless Controllers running Cisco IOS XE Software.
Can cisco-sa-iosxe-ewlc-dos-TkuPVmZN be exploited remotely?
Yes, cisco-sa-iosxe-ewlc-dos-TkuPVmZN can be exploited by unauthenticated remote attackers.
What is the impact of cisco-sa-iosxe-ewlc-dos-TkuPVmZN?
The impact of cisco-sa-iosxe-ewlc-dos-TkuPVmZN is a memory leak that could lead to a denial of service on affected devices.
- agent/event
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/severity
- agent/title
- agent/weakness
- agent/references
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios xe software for catalyst 9800 series wireless controllers
- canonical/cisco ios xe