CVE Feed

    Dashboard / CVE / CVE-2023-20176

    CVE-2023-20176

    A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service. This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an affected device as a wireless client and sending a high rate of traffic over an extended period of time. A successful exploit could allow the attacker to cause the Datagram TLS (DTLS) session to tear down and reset, causing a denial of service (DoS) condition.

    Published:Sep 27, 2023
    Last Modified:Nov 21, 2024
    EPS:Sep 27, 2023
    EPSS Score:0.00123
    CVSS Score:5.8

    Affected Products

    Vendor
    Cisco
    Product
    Catalyst 9124
    Vendor
    Cisco
    Product
    Catalyst 9124 Firmware
    Vendor
    Cisco
    Product
    Catalyst 9130
    Vendor
    Cisco
    Product
    Catalyst 9130 Firmware
    Vendor
    Cisco
    Product
    Catalyst 9136
    Vendor
    Cisco
    Product
    Catalyst 9136 Firmware
    Vendor
    Cisco
    Product
    Catalyst 9164
    Vendor
    Cisco
    Product
    Catalyst 9164 Firmware
    Vendor
    Cisco
    Product
    Catalyst 9166
    Vendor
    Cisco
    Product
    Catalyst 9166 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-20196 (CVSS 5.3) — A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Softwa…
    CVE-2024-20259 (CVSS 8.6) — A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote a…
    CVE-2023-20112 (CVSS 7.4) — A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause…
    CVE-2023-20097 (CVSS 4.6) — A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject ar…
    CVE-2023-20056 (CVSS 6.5) — A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local …
    CVE-2022-20919 (CVSS 8.6) — A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are sent to Cisco…
    CVE-2022-20855 (CVSS 7.9) — A vulnerability in the self-healing functionality of Cisco IOS XE Software for Embedded Wireless Controllers o…
    CVE-2021-1615 (CVSS 8.6) — A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller (EWC) Software fo…
    CVE-2021-34740 (CVSS 7.4) — A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software…
    CVE-2020-26139 (CVSS 5.3) — An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clien…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High