Search

Find a vulnerability

Search criteria Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    2 vulnerabilities found for catalyst_9800_embedded_wireless_controller_firmware by cisco

    CVE-2023-20268 (GCVE-0-2023-20268)

    Vulnerability from nvd – Published: 2023-09-27 17:22 – Updated: 2024-12-12 17:19
    VLAI
    Title
    Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability
    Summary
    A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device.  This vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic.
    CWE
    • CWE-400 - Uncontrolled Resource Consumption
    Assigner
    Impacted products
    Vendor Product Version
    Cisco Cisco Aironet Access Point Software Affected: 8.3.135.0
    Affected: 8.3.140.0
    Affected: 8.8.111.0
    Affected: 8.5.151.0
    Affected: 8.3.104.46
    Affected: 8.10.121.0
    Affected: 8.4.1.218
    Affected: 8.3.122.0
    Affected: 8.8.100.0
    Affected: 8.3.131.0
    Affected: 8.5.140.0
    Affected: 8.3.132.0
    Affected: 8.5.100.0
    Affected: 8.5.103.0
    Affected: 8.3.133.0
    Affected: 8.3.150.0
    Affected: 8.5.101.0
    Affected: 8.5.105.0
    Affected: 8.10.122.0
    Affected: 8.8.130.0
    Affected: 8.10.112.0
    Affected: 8.3.143.0
    Affected: 8.8.120.0
    Affected: 8.9.111.0
    Affected: 8.5.102.0
    Affected: 8.5.161.0
    Affected: 8.3.121.0
    Affected: 8.9.100.0
    Affected: 8.10.111.0
    Affected: 8.2.170.0
    Affected: 8.2.163.0
    Affected: 8.10.130.0
    Affected: 8.10.105.0
    Affected: 8.6.101.0
    Affected: 8.3.104.64
    Affected: 8.3.15.117
    Affected: 8.5.110.0
    Affected: 8.2.161.0
    Affected: 8.4.1.199
    Affected: 8.4.100.0
    Affected: 8.5.131.0
    Affected: 8.7.1.16
    Affected: 8.4.1.175
    Affected: 8.3.141.0
    Affected: 8.3.108.0
    Affected: 8.2.111.0
    Affected: 8.5.135.0
    Affected: 8.2.160.0
    Affected: 8.5.120.0
    Affected: 8.6.1.84
    Affected: 8.7.106.0
    Affected: 8.6.1.70
    Affected: 8.3.90.36
    Affected: 8.10.113.0
    Affected: 8.7.102.0
    Affected: 8.2.130.0
    Affected: 8.3.130.0
    Affected: 8.2.110.0
    Affected: 8.3.15.142
    Affected: 8.3.111.0
    Affected: 8.4.1.142
    Affected: 8.6.1.71
    Affected: 8.3.104.14
    Affected: 8.8.125.0
    Affected: 8.3.112.0
    Affected: 8.2.151.0
    Affected: 8.3.90.53
    Affected: 8.3.102.0
    Affected: 8.2.166.0
    Affected: 8.2.164.0
    Affected: 8.5.160.0
    Affected: 8.3.15.165
    Affected: 8.4.2.75
    Affected: 8.3.90.58
    Affected: 8.3.90.25
    Affected: 8.2.141.0
    Affected: 8.3.90.11
    Affected: 8.3.15.169
    Affected: 8.3.15.158
    Affected: 8.3.15.25
    Affected: 8.3.104.37
    Affected: 8.4.1.91
    Affected: 8.2.100.0
    Affected: 8.2.121.0
    Affected: 8.3.15.120
    Affected: 8.3.15.118
    Affected: 8.4.1.92
    Affected: 8.3.200.200
    Affected: 8.10.141.0
    Affected: 8.10.142.0
    Affected: 8.5.171.0
    Affected: 8.10.150.0
    Affected: 8.10.151.0
    Affected: 8.5.164.0
    Affected: 8.10.161.0
    Affected: 8.10.162.0
    Affected: 8.5.182.0
    Affected: 8.10.171.0
    Affected: 8.10.170.0
    Affected: 8.10.180.0
    Affected: 8.10.181.0
    Affected: 8.10.182.0
    Affected: 8.10.183.0
    Affected: 8.10.185.0
    Affected: 8.5.182.11 ME
    Create a notification for this product.
    Cisco Cisco Aironet Access Point Software (IOS XE Controller) Affected: 17.1.1t
    Affected: 16.10.1s
    Affected: 16.10.1
    Affected: 17.3.1
    Affected: 16.11.1b
    Affected: 17.1.2
    Affected: 17.1.1
    Affected: 16.12.4
    Affected: 17.2.2
    Affected: 16.12.3
    Affected: 16.11.1a
    Affected: 16.12.2t
    Affected: 16.10.1e
    Affected: 16.11.1
    Affected: 16.11.1c
    Affected: 17.1.1s
    Affected: 16.12.3s
    Affected: 16.12.1s
    Affected: 16.12.1t
    Affected: 16.12.2s
    Affected: 17.2.1
    Affected: 17.2.1a
    Affected: 16.12.1
    Affected: 17.1.3
    Affected: 17.3.2a
    Affected: 16.12.5
    Affected: 17.3.2
    Affected: 17.4.1
    Affected: 16.12.4a
    Affected: 17.3.3
    Affected: 17.2.3
    Affected: 17.5.1
    Affected: 17.4.2
    Affected: 17.3.5
    Affected: 17.3.4
    Affected: 16.12.6
    Affected: 17.6.1
    Affected: 17.7.1
    Affected: 17.6.2
    Affected: 16.12.6a
    Affected: 17.3.4c
    Affected: 16.12.7
    Affected: 17.3.5a
    Affected: 17.6.3
    Affected: 17.8.1
    Affected: 17.9.1
    Affected: 16.12.8
    Affected: 17.6.4
    Affected: 17.3.5b
    Affected: 17.3.6
    Affected: 17.10.1
    Affected: 17.9.2
    Affected: 17.6.5
    Affected: 17.3.7
    Affected: 17.9.3
    Affected: 17.11.1
    Affected: 17.6.6
    Affected: 17.3.8
    Create a notification for this product.
    Cisco Cisco Business Wireless Access Point Software Affected: 10.3.1.0
    Affected: 10.0.1.0
    Affected: 10.2.1.0
    Affected: 10.1.1.0
    Affected: 10.3.1.1
    Affected: 10.4.1.0
    Affected: 10.6.1.0
    Affected: 10.1.2.0
    Affected: 10.0.2.0
    Affected: 10.7.1.0
    Affected: 10.2.2.0
    Affected: 0.0.0.0
    Affected: 10.3.2.0
    Affected: 10.4.2.0
    Affected: 10.8.1.0
    Affected: 10.5.2.0
    Affected: 10.9.1.0
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T09:05:36.874Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "cisco-sa-ap-dos-capwap-DDMCZS4m",
                "tags": [
                  "x_transferred"
                ],
                "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-dos-capwap-DDMCZS4m"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unknown",
              "product": "Cisco Aironet Access Point Software",
              "vendor": "Cisco",
              "versions": [
                {
                  "status": "affected",
                  "version": "8.3.135.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.140.0"
                },
                {
                  "status": "affected",
                  "version": "8.8.111.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.151.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.104.46"
                },
                {
                  "status": "affected",
                  "version": "8.10.121.0"
                },
                {
                  "status": "affected",
                  "version": "8.4.1.218"
                },
                {
                  "status": "affected",
                  "version": "8.3.122.0"
                },
                {
                  "status": "affected",
                  "version": "8.8.100.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.131.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.140.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.132.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.100.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.103.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.133.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.150.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.101.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.105.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.122.0"
                },
                {
                  "status": "affected",
                  "version": "8.8.130.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.112.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.143.0"
                },
                {
                  "status": "affected",
                  "version": "8.8.120.0"
                },
                {
                  "status": "affected",
                  "version": "8.9.111.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.102.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.161.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.121.0"
                },
                {
                  "status": "affected",
                  "version": "8.9.100.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.111.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.170.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.163.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.130.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.105.0"
                },
                {
                  "status": "affected",
                  "version": "8.6.101.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.104.64"
                },
                {
                  "status": "affected",
                  "version": "8.3.15.117"
                },
                {
                  "status": "affected",
                  "version": "8.5.110.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.161.0"
                },
                {
                  "status": "affected",
                  "version": "8.4.1.199"
                },
                {
                  "status": "affected",
                  "version": "8.4.100.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.131.0"
                },
                {
                  "status": "affected",
                  "version": "8.7.1.16"
                },
                {
                  "status": "affected",
                  "version": "8.4.1.175"
                },
                {
                  "status": "affected",
                  "version": "8.3.141.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.108.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.111.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.135.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.160.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.120.0"
                },
                {
                  "status": "affected",
                  "version": "8.6.1.84"
                },
                {
                  "status": "affected",
                  "version": "8.7.106.0"
                },
                {
                  "status": "affected",
                  "version": "8.6.1.70"
                },
                {
                  "status": "affected",
                  "version": "8.3.90.36"
                },
                {
                  "status": "affected",
                  "version": "8.10.113.0"
                },
                {
                  "status": "affected",
                  "version": "8.7.102.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.130.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.130.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.110.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.15.142"
                },
                {
                  "status": "affected",
                  "version": "8.3.111.0"
                },
                {
                  "status": "affected",
                  "version": "8.4.1.142"
                },
                {
                  "status": "affected",
                  "version": "8.6.1.71"
                },
                {
                  "status": "affected",
                  "version": "8.3.104.14"
                },
                {
                  "status": "affected",
                  "version": "8.8.125.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.112.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.151.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.90.53"
                },
                {
                  "status": "affected",
                  "version": "8.3.102.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.166.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.164.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.160.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.15.165"
                },
                {
                  "status": "affected",
                  "version": "8.4.2.75"
                },
                {
                  "status": "affected",
                  "version": "8.3.90.58"
                },
                {
                  "status": "affected",
                  "version": "8.3.90.25"
                },
                {
                  "status": "affected",
                  "version": "8.2.141.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.90.11"
                },
                {
                  "status": "affected",
                  "version": "8.3.15.169"
                },
                {
                  "status": "affected",
                  "version": "8.3.15.158"
                },
                {
                  "status": "affected",
                  "version": "8.3.15.25"
                },
                {
                  "status": "affected",
                  "version": "8.3.104.37"
                },
                {
                  "status": "affected",
                  "version": "8.4.1.91"
                },
                {
                  "status": "affected",
                  "version": "8.2.100.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.121.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.15.120"
                },
                {
                  "status": "affected",
                  "version": "8.3.15.118"
                },
                {
                  "status": "affected",
                  "version": "8.4.1.92"
                },
                {
                  "status": "affected",
                  "version": "8.3.200.200"
                },
                {
                  "status": "affected",
                  "version": "8.10.141.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.142.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.171.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.150.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.151.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.164.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.161.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.162.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.182.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.171.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.170.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.180.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.181.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.182.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.183.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.185.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.182.11 ME"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Cisco Aironet Access Point Software (IOS XE Controller)",
              "vendor": "Cisco",
              "versions": [
                {
                  "status": "affected",
                  "version": "17.1.1t"
                },
                {
                  "status": "affected",
                  "version": "16.10.1s"
                },
                {
                  "status": "affected",
                  "version": "16.10.1"
                },
                {
                  "status": "affected",
                  "version": "17.3.1"
                },
                {
                  "status": "affected",
                  "version": "16.11.1b"
                },
                {
                  "status": "affected",
                  "version": "17.1.2"
                },
                {
                  "status": "affected",
                  "version": "17.1.1"
                },
                {
                  "status": "affected",
                  "version": "16.12.4"
                },
                {
                  "status": "affected",
                  "version": "17.2.2"
                },
                {
                  "status": "affected",
                  "version": "16.12.3"
                },
                {
                  "status": "affected",
                  "version": "16.11.1a"
                },
                {
                  "status": "affected",
                  "version": "16.12.2t"
                },
                {
                  "status": "affected",
                  "version": "16.10.1e"
                },
                {
                  "status": "affected",
                  "version": "16.11.1"
                },
                {
                  "status": "affected",
                  "version": "16.11.1c"
                },
                {
                  "status": "affected",
                  "version": "17.1.1s"
                },
                {
                  "status": "affected",
                  "version": "16.12.3s"
                },
                {
                  "status": "affected",
                  "version": "16.12.1s"
                },
                {
                  "status": "affected",
                  "version": "16.12.1t"
                },
                {
                  "status": "affected",
                  "version": "16.12.2s"
                },
                {
                  "status": "affected",
                  "version": "17.2.1"
                },
                {
                  "status": "affected",
                  "version": "17.2.1a"
                },
                {
                  "status": "affected",
                  "version": "16.12.1"
                },
                {
                  "status": "affected",
                  "version": "17.1.3"
                },
                {
                  "status": "affected",
                  "version": "17.3.2a"
                },
                {
                  "status": "affected",
                  "version": "16.12.5"
                },
                {
                  "status": "affected",
                  "version": "17.3.2"
                },
                {
                  "status": "affected",
                  "version": "17.4.1"
                },
                {
                  "status": "affected",
                  "version": "16.12.4a"
                },
                {
                  "status": "affected",
                  "version": "17.3.3"
                },
                {
                  "status": "affected",
                  "version": "17.2.3"
                },
                {
                  "status": "affected",
                  "version": "17.5.1"
                },
                {
                  "status": "affected",
                  "version": "17.4.2"
                },
                {
                  "status": "affected",
                  "version": "17.3.5"
                },
                {
                  "status": "affected",
                  "version": "17.3.4"
                },
                {
                  "status": "affected",
                  "version": "16.12.6"
                },
                {
                  "status": "affected",
                  "version": "17.6.1"
                },
                {
                  "status": "affected",
                  "version": "17.7.1"
                },
                {
                  "status": "affected",
                  "version": "17.6.2"
                },
                {
                  "status": "affected",
                  "version": "16.12.6a"
                },
                {
                  "status": "affected",
                  "version": "17.3.4c"
                },
                {
                  "status": "affected",
                  "version": "16.12.7"
                },
                {
                  "status": "affected",
                  "version": "17.3.5a"
                },
                {
                  "status": "affected",
                  "version": "17.6.3"
                },
                {
                  "status": "affected",
                  "version": "17.8.1"
                },
                {
                  "status": "affected",
                  "version": "17.9.1"
                },
                {
                  "status": "affected",
                  "version": "16.12.8"
                },
                {
                  "status": "affected",
                  "version": "17.6.4"
                },
                {
                  "status": "affected",
                  "version": "17.3.5b"
                },
                {
                  "status": "affected",
                  "version": "17.3.6"
                },
                {
                  "status": "affected",
                  "version": "17.10.1"
                },
                {
                  "status": "affected",
                  "version": "17.9.2"
                },
                {
                  "status": "affected",
                  "version": "17.6.5"
                },
                {
                  "status": "affected",
                  "version": "17.3.7"
                },
                {
                  "status": "affected",
                  "version": "17.9.3"
                },
                {
                  "status": "affected",
                  "version": "17.11.1"
                },
                {
                  "status": "affected",
                  "version": "17.6.6"
                },
                {
                  "status": "affected",
                  "version": "17.3.8"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Cisco Business Wireless Access Point Software",
              "vendor": "Cisco",
              "versions": [
                {
                  "status": "affected",
                  "version": "10.3.1.0"
                },
                {
                  "status": "affected",
                  "version": "10.0.1.0"
                },
                {
                  "status": "affected",
                  "version": "10.2.1.0"
                },
                {
                  "status": "affected",
                  "version": "10.1.1.0"
                },
                {
                  "status": "affected",
                  "version": "10.3.1.1"
                },
                {
                  "status": "affected",
                  "version": "10.4.1.0"
                },
                {
                  "status": "affected",
                  "version": "10.6.1.0"
                },
                {
                  "status": "affected",
                  "version": "10.1.2.0"
                },
                {
                  "status": "affected",
                  "version": "10.0.2.0"
                },
                {
                  "status": "affected",
                  "version": "10.7.1.0"
                },
                {
                  "status": "affected",
                  "version": "10.2.2.0"
                },
                {
                  "status": "affected",
                  "version": "0.0.0.0"
                },
                {
                  "status": "affected",
                  "version": "10.3.2.0"
                },
                {
                  "status": "affected",
                  "version": "10.4.2.0"
                },
                {
                  "status": "affected",
                  "version": "10.8.1.0"
                },
                {
                  "status": "affected",
                  "version": "10.5.2.0"
                },
                {
                  "status": "affected",
                  "version": "10.9.1.0"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device.\u0026nbsp;\r\n\r\nThis vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic."
            }
          ],
          "exploits": [
            {
              "lang": "en",
              "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 4.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
                "version": "3.1"
              },
              "format": "cvssV3_1"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-400",
                  "description": "Uncontrolled Resource Consumption",
                  "lang": "en",
                  "type": "cwe"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-12-12T17:19:02.520Z",
            "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
            "shortName": "cisco"
          },
          "references": [
            {
              "name": "cisco-sa-ap-dos-capwap-DDMCZS4m",
              "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-dos-capwap-DDMCZS4m"
            }
          ],
          "source": {
            "advisory": "cisco-sa-ap-dos-capwap-DDMCZS4m",
            "defects": [
              "CSCwe75371"
            ],
            "discovery": "INTERNAL"
          },
          "title": "Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "assignerShortName": "cisco",
        "cveId": "CVE-2023-20268",
        "datePublished": "2023-09-27T17:22:55.840Z",
        "dateReserved": "2022-10-27T18:47:50.373Z",
        "dateUpdated": "2024-12-12T17:19:02.520Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-20268 (GCVE-0-2023-20268)

    Vulnerability from cvelistv5 – Published: 2023-09-27 17:22 – Updated: 2024-12-12 17:19
    VLAI
    Title
    Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability
    Summary
    A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device.  This vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic.
    CWE
    • CWE-400 - Uncontrolled Resource Consumption
    Assigner
    Impacted products
    Vendor Product Version
    Cisco Cisco Aironet Access Point Software Affected: 8.3.135.0
    Affected: 8.3.140.0
    Affected: 8.8.111.0
    Affected: 8.5.151.0
    Affected: 8.3.104.46
    Affected: 8.10.121.0
    Affected: 8.4.1.218
    Affected: 8.3.122.0
    Affected: 8.8.100.0
    Affected: 8.3.131.0
    Affected: 8.5.140.0
    Affected: 8.3.132.0
    Affected: 8.5.100.0
    Affected: 8.5.103.0
    Affected: 8.3.133.0
    Affected: 8.3.150.0
    Affected: 8.5.101.0
    Affected: 8.5.105.0
    Affected: 8.10.122.0
    Affected: 8.8.130.0
    Affected: 8.10.112.0
    Affected: 8.3.143.0
    Affected: 8.8.120.0
    Affected: 8.9.111.0
    Affected: 8.5.102.0
    Affected: 8.5.161.0
    Affected: 8.3.121.0
    Affected: 8.9.100.0
    Affected: 8.10.111.0
    Affected: 8.2.170.0
    Affected: 8.2.163.0
    Affected: 8.10.130.0
    Affected: 8.10.105.0
    Affected: 8.6.101.0
    Affected: 8.3.104.64
    Affected: 8.3.15.117
    Affected: 8.5.110.0
    Affected: 8.2.161.0
    Affected: 8.4.1.199
    Affected: 8.4.100.0
    Affected: 8.5.131.0
    Affected: 8.7.1.16
    Affected: 8.4.1.175
    Affected: 8.3.141.0
    Affected: 8.3.108.0
    Affected: 8.2.111.0
    Affected: 8.5.135.0
    Affected: 8.2.160.0
    Affected: 8.5.120.0
    Affected: 8.6.1.84
    Affected: 8.7.106.0
    Affected: 8.6.1.70
    Affected: 8.3.90.36
    Affected: 8.10.113.0
    Affected: 8.7.102.0
    Affected: 8.2.130.0
    Affected: 8.3.130.0
    Affected: 8.2.110.0
    Affected: 8.3.15.142
    Affected: 8.3.111.0
    Affected: 8.4.1.142
    Affected: 8.6.1.71
    Affected: 8.3.104.14
    Affected: 8.8.125.0
    Affected: 8.3.112.0
    Affected: 8.2.151.0
    Affected: 8.3.90.53
    Affected: 8.3.102.0
    Affected: 8.2.166.0
    Affected: 8.2.164.0
    Affected: 8.5.160.0
    Affected: 8.3.15.165
    Affected: 8.4.2.75
    Affected: 8.3.90.58
    Affected: 8.3.90.25
    Affected: 8.2.141.0
    Affected: 8.3.90.11
    Affected: 8.3.15.169
    Affected: 8.3.15.158
    Affected: 8.3.15.25
    Affected: 8.3.104.37
    Affected: 8.4.1.91
    Affected: 8.2.100.0
    Affected: 8.2.121.0
    Affected: 8.3.15.120
    Affected: 8.3.15.118
    Affected: 8.4.1.92
    Affected: 8.3.200.200
    Affected: 8.10.141.0
    Affected: 8.10.142.0
    Affected: 8.5.171.0
    Affected: 8.10.150.0
    Affected: 8.10.151.0
    Affected: 8.5.164.0
    Affected: 8.10.161.0
    Affected: 8.10.162.0
    Affected: 8.5.182.0
    Affected: 8.10.171.0
    Affected: 8.10.170.0
    Affected: 8.10.180.0
    Affected: 8.10.181.0
    Affected: 8.10.182.0
    Affected: 8.10.183.0
    Affected: 8.10.185.0
    Affected: 8.5.182.11 ME
    Create a notification for this product.
    Cisco Cisco Aironet Access Point Software (IOS XE Controller) Affected: 17.1.1t
    Affected: 16.10.1s
    Affected: 16.10.1
    Affected: 17.3.1
    Affected: 16.11.1b
    Affected: 17.1.2
    Affected: 17.1.1
    Affected: 16.12.4
    Affected: 17.2.2
    Affected: 16.12.3
    Affected: 16.11.1a
    Affected: 16.12.2t
    Affected: 16.10.1e
    Affected: 16.11.1
    Affected: 16.11.1c
    Affected: 17.1.1s
    Affected: 16.12.3s
    Affected: 16.12.1s
    Affected: 16.12.1t
    Affected: 16.12.2s
    Affected: 17.2.1
    Affected: 17.2.1a
    Affected: 16.12.1
    Affected: 17.1.3
    Affected: 17.3.2a
    Affected: 16.12.5
    Affected: 17.3.2
    Affected: 17.4.1
    Affected: 16.12.4a
    Affected: 17.3.3
    Affected: 17.2.3
    Affected: 17.5.1
    Affected: 17.4.2
    Affected: 17.3.5
    Affected: 17.3.4
    Affected: 16.12.6
    Affected: 17.6.1
    Affected: 17.7.1
    Affected: 17.6.2
    Affected: 16.12.6a
    Affected: 17.3.4c
    Affected: 16.12.7
    Affected: 17.3.5a
    Affected: 17.6.3
    Affected: 17.8.1
    Affected: 17.9.1
    Affected: 16.12.8
    Affected: 17.6.4
    Affected: 17.3.5b
    Affected: 17.3.6
    Affected: 17.10.1
    Affected: 17.9.2
    Affected: 17.6.5
    Affected: 17.3.7
    Affected: 17.9.3
    Affected: 17.11.1
    Affected: 17.6.6
    Affected: 17.3.8
    Create a notification for this product.
    Cisco Cisco Business Wireless Access Point Software Affected: 10.3.1.0
    Affected: 10.0.1.0
    Affected: 10.2.1.0
    Affected: 10.1.1.0
    Affected: 10.3.1.1
    Affected: 10.4.1.0
    Affected: 10.6.1.0
    Affected: 10.1.2.0
    Affected: 10.0.2.0
    Affected: 10.7.1.0
    Affected: 10.2.2.0
    Affected: 0.0.0.0
    Affected: 10.3.2.0
    Affected: 10.4.2.0
    Affected: 10.8.1.0
    Affected: 10.5.2.0
    Affected: 10.9.1.0
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T09:05:36.874Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "cisco-sa-ap-dos-capwap-DDMCZS4m",
                "tags": [
                  "x_transferred"
                ],
                "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-dos-capwap-DDMCZS4m"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unknown",
              "product": "Cisco Aironet Access Point Software",
              "vendor": "Cisco",
              "versions": [
                {
                  "status": "affected",
                  "version": "8.3.135.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.140.0"
                },
                {
                  "status": "affected",
                  "version": "8.8.111.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.151.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.104.46"
                },
                {
                  "status": "affected",
                  "version": "8.10.121.0"
                },
                {
                  "status": "affected",
                  "version": "8.4.1.218"
                },
                {
                  "status": "affected",
                  "version": "8.3.122.0"
                },
                {
                  "status": "affected",
                  "version": "8.8.100.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.131.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.140.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.132.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.100.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.103.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.133.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.150.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.101.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.105.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.122.0"
                },
                {
                  "status": "affected",
                  "version": "8.8.130.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.112.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.143.0"
                },
                {
                  "status": "affected",
                  "version": "8.8.120.0"
                },
                {
                  "status": "affected",
                  "version": "8.9.111.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.102.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.161.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.121.0"
                },
                {
                  "status": "affected",
                  "version": "8.9.100.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.111.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.170.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.163.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.130.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.105.0"
                },
                {
                  "status": "affected",
                  "version": "8.6.101.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.104.64"
                },
                {
                  "status": "affected",
                  "version": "8.3.15.117"
                },
                {
                  "status": "affected",
                  "version": "8.5.110.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.161.0"
                },
                {
                  "status": "affected",
                  "version": "8.4.1.199"
                },
                {
                  "status": "affected",
                  "version": "8.4.100.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.131.0"
                },
                {
                  "status": "affected",
                  "version": "8.7.1.16"
                },
                {
                  "status": "affected",
                  "version": "8.4.1.175"
                },
                {
                  "status": "affected",
                  "version": "8.3.141.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.108.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.111.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.135.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.160.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.120.0"
                },
                {
                  "status": "affected",
                  "version": "8.6.1.84"
                },
                {
                  "status": "affected",
                  "version": "8.7.106.0"
                },
                {
                  "status": "affected",
                  "version": "8.6.1.70"
                },
                {
                  "status": "affected",
                  "version": "8.3.90.36"
                },
                {
                  "status": "affected",
                  "version": "8.10.113.0"
                },
                {
                  "status": "affected",
                  "version": "8.7.102.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.130.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.130.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.110.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.15.142"
                },
                {
                  "status": "affected",
                  "version": "8.3.111.0"
                },
                {
                  "status": "affected",
                  "version": "8.4.1.142"
                },
                {
                  "status": "affected",
                  "version": "8.6.1.71"
                },
                {
                  "status": "affected",
                  "version": "8.3.104.14"
                },
                {
                  "status": "affected",
                  "version": "8.8.125.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.112.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.151.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.90.53"
                },
                {
                  "status": "affected",
                  "version": "8.3.102.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.166.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.164.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.160.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.15.165"
                },
                {
                  "status": "affected",
                  "version": "8.4.2.75"
                },
                {
                  "status": "affected",
                  "version": "8.3.90.58"
                },
                {
                  "status": "affected",
                  "version": "8.3.90.25"
                },
                {
                  "status": "affected",
                  "version": "8.2.141.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.90.11"
                },
                {
                  "status": "affected",
                  "version": "8.3.15.169"
                },
                {
                  "status": "affected",
                  "version": "8.3.15.158"
                },
                {
                  "status": "affected",
                  "version": "8.3.15.25"
                },
                {
                  "status": "affected",
                  "version": "8.3.104.37"
                },
                {
                  "status": "affected",
                  "version": "8.4.1.91"
                },
                {
                  "status": "affected",
                  "version": "8.2.100.0"
                },
                {
                  "status": "affected",
                  "version": "8.2.121.0"
                },
                {
                  "status": "affected",
                  "version": "8.3.15.120"
                },
                {
                  "status": "affected",
                  "version": "8.3.15.118"
                },
                {
                  "status": "affected",
                  "version": "8.4.1.92"
                },
                {
                  "status": "affected",
                  "version": "8.3.200.200"
                },
                {
                  "status": "affected",
                  "version": "8.10.141.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.142.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.171.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.150.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.151.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.164.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.161.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.162.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.182.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.171.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.170.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.180.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.181.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.182.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.183.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.185.0"
                },
                {
                  "status": "affected",
                  "version": "8.5.182.11 ME"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Cisco Aironet Access Point Software (IOS XE Controller)",
              "vendor": "Cisco",
              "versions": [
                {
                  "status": "affected",
                  "version": "17.1.1t"
                },
                {
                  "status": "affected",
                  "version": "16.10.1s"
                },
                {
                  "status": "affected",
                  "version": "16.10.1"
                },
                {
                  "status": "affected",
                  "version": "17.3.1"
                },
                {
                  "status": "affected",
                  "version": "16.11.1b"
                },
                {
                  "status": "affected",
                  "version": "17.1.2"
                },
                {
                  "status": "affected",
                  "version": "17.1.1"
                },
                {
                  "status": "affected",
                  "version": "16.12.4"
                },
                {
                  "status": "affected",
                  "version": "17.2.2"
                },
                {
                  "status": "affected",
                  "version": "16.12.3"
                },
                {
                  "status": "affected",
                  "version": "16.11.1a"
                },
                {
                  "status": "affected",
                  "version": "16.12.2t"
                },
                {
                  "status": "affected",
                  "version": "16.10.1e"
                },
                {
                  "status": "affected",
                  "version": "16.11.1"
                },
                {
                  "status": "affected",
                  "version": "16.11.1c"
                },
                {
                  "status": "affected",
                  "version": "17.1.1s"
                },
                {
                  "status": "affected",
                  "version": "16.12.3s"
                },
                {
                  "status": "affected",
                  "version": "16.12.1s"
                },
                {
                  "status": "affected",
                  "version": "16.12.1t"
                },
                {
                  "status": "affected",
                  "version": "16.12.2s"
                },
                {
                  "status": "affected",
                  "version": "17.2.1"
                },
                {
                  "status": "affected",
                  "version": "17.2.1a"
                },
                {
                  "status": "affected",
                  "version": "16.12.1"
                },
                {
                  "status": "affected",
                  "version": "17.1.3"
                },
                {
                  "status": "affected",
                  "version": "17.3.2a"
                },
                {
                  "status": "affected",
                  "version": "16.12.5"
                },
                {
                  "status": "affected",
                  "version": "17.3.2"
                },
                {
                  "status": "affected",
                  "version": "17.4.1"
                },
                {
                  "status": "affected",
                  "version": "16.12.4a"
                },
                {
                  "status": "affected",
                  "version": "17.3.3"
                },
                {
                  "status": "affected",
                  "version": "17.2.3"
                },
                {
                  "status": "affected",
                  "version": "17.5.1"
                },
                {
                  "status": "affected",
                  "version": "17.4.2"
                },
                {
                  "status": "affected",
                  "version": "17.3.5"
                },
                {
                  "status": "affected",
                  "version": "17.3.4"
                },
                {
                  "status": "affected",
                  "version": "16.12.6"
                },
                {
                  "status": "affected",
                  "version": "17.6.1"
                },
                {
                  "status": "affected",
                  "version": "17.7.1"
                },
                {
                  "status": "affected",
                  "version": "17.6.2"
                },
                {
                  "status": "affected",
                  "version": "16.12.6a"
                },
                {
                  "status": "affected",
                  "version": "17.3.4c"
                },
                {
                  "status": "affected",
                  "version": "16.12.7"
                },
                {
                  "status": "affected",
                  "version": "17.3.5a"
                },
                {
                  "status": "affected",
                  "version": "17.6.3"
                },
                {
                  "status": "affected",
                  "version": "17.8.1"
                },
                {
                  "status": "affected",
                  "version": "17.9.1"
                },
                {
                  "status": "affected",
                  "version": "16.12.8"
                },
                {
                  "status": "affected",
                  "version": "17.6.4"
                },
                {
                  "status": "affected",
                  "version": "17.3.5b"
                },
                {
                  "status": "affected",
                  "version": "17.3.6"
                },
                {
                  "status": "affected",
                  "version": "17.10.1"
                },
                {
                  "status": "affected",
                  "version": "17.9.2"
                },
                {
                  "status": "affected",
                  "version": "17.6.5"
                },
                {
                  "status": "affected",
                  "version": "17.3.7"
                },
                {
                  "status": "affected",
                  "version": "17.9.3"
                },
                {
                  "status": "affected",
                  "version": "17.11.1"
                },
                {
                  "status": "affected",
                  "version": "17.6.6"
                },
                {
                  "status": "affected",
                  "version": "17.3.8"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Cisco Business Wireless Access Point Software",
              "vendor": "Cisco",
              "versions": [
                {
                  "status": "affected",
                  "version": "10.3.1.0"
                },
                {
                  "status": "affected",
                  "version": "10.0.1.0"
                },
                {
                  "status": "affected",
                  "version": "10.2.1.0"
                },
                {
                  "status": "affected",
                  "version": "10.1.1.0"
                },
                {
                  "status": "affected",
                  "version": "10.3.1.1"
                },
                {
                  "status": "affected",
                  "version": "10.4.1.0"
                },
                {
                  "status": "affected",
                  "version": "10.6.1.0"
                },
                {
                  "status": "affected",
                  "version": "10.1.2.0"
                },
                {
                  "status": "affected",
                  "version": "10.0.2.0"
                },
                {
                  "status": "affected",
                  "version": "10.7.1.0"
                },
                {
                  "status": "affected",
                  "version": "10.2.2.0"
                },
                {
                  "status": "affected",
                  "version": "0.0.0.0"
                },
                {
                  "status": "affected",
                  "version": "10.3.2.0"
                },
                {
                  "status": "affected",
                  "version": "10.4.2.0"
                },
                {
                  "status": "affected",
                  "version": "10.8.1.0"
                },
                {
                  "status": "affected",
                  "version": "10.5.2.0"
                },
                {
                  "status": "affected",
                  "version": "10.9.1.0"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device.\u0026nbsp;\r\n\r\nThis vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic."
            }
          ],
          "exploits": [
            {
              "lang": "en",
              "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 4.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
                "version": "3.1"
              },
              "format": "cvssV3_1"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-400",
                  "description": "Uncontrolled Resource Consumption",
                  "lang": "en",
                  "type": "cwe"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-12-12T17:19:02.520Z",
            "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
            "shortName": "cisco"
          },
          "references": [
            {
              "name": "cisco-sa-ap-dos-capwap-DDMCZS4m",
              "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-dos-capwap-DDMCZS4m"
            }
          ],
          "source": {
            "advisory": "cisco-sa-ap-dos-capwap-DDMCZS4m",
            "defects": [
              "CSCwe75371"
            ],
            "discovery": "INTERNAL"
          },
          "title": "Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "assignerShortName": "cisco",
        "cveId": "CVE-2023-20268",
        "datePublished": "2023-09-27T17:22:55.840Z",
        "dateReserved": "2022-10-27T18:47:50.373Z",
        "dateUpdated": "2024-12-12T17:19:02.520Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }