CVE-2023-20202
A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper memory management. An attacker could exploit this vulnerability by sending a series of network requests to an affected device. A successful exploit could allow the attacker to cause the wncd process to consume available memory and eventually cause the device to reload, resulting in a DoS condition.
Published:Sep 27, 2023
Last Modified:Nov 21, 2024
EPS:Sep 27, 2023
EPSS Score:0.0008
CVSS Score:6.1
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
Catalyst 9105i
Cisco
Catalyst 9105i
Vendor
Cisco
Product
Catalyst 9105w
Cisco
Catalyst 9105w
Vendor
Cisco
Product
Catalyst 9115
Cisco
Catalyst 9115
Vendor
Cisco
Product
Catalyst 9120
Cisco
Catalyst 9120
Vendor
Cisco
Product
Catalyst 9124d
Cisco
Catalyst 9124d
Vendor
Cisco
Product
Catalyst 9124e
Cisco
Catalyst 9124e
Vendor
Cisco
Product
Catalyst 9124i
Cisco
Catalyst 9124i
Vendor
Cisco
Product
Catalyst 9130
Cisco
Catalyst 9130
Vendor
Cisco
Product
Catalyst 9136
Cisco
Catalyst 9136
Vendor
Cisco
Product
Catalyst 9162
Cisco
Catalyst 9162
Vendor
Cisco
Product
Catalyst 9164
Cisco
Catalyst 9164
Vendor
Cisco
Product
Catalyst 9166
Cisco
Catalyst 9166
Vendor
Cisco
Product
Catalyst 9166d1
Cisco
Catalyst 9166d1
Vendor
Cisco
Product
Catalyst 9800-40
Cisco
Catalyst 9800-40
Vendor
Cisco
Product
Catalyst 9800-80
Cisco
Catalyst 9800-80
Vendor
Cisco
Product
Catalyst 9800-cl
Cisco
Catalyst 9800-cl
Vendor
Cisco
Product
Catalyst 9800-l
Cisco
Catalyst 9800-l
Vendor
Cisco
Product
Catalyst Iw6300
Cisco
Catalyst Iw6300
Vendor
Cisco
Product
Esw6300
Cisco
Esw6300
Vendor
Cisco
Product
Ios Xe
Cisco
Ios Xe
Vendor
Cisco
Product
Iw9167eh-x-ap
Cisco
Iw9167eh-x-ap
Vendor
Cisco
Product
Iw9167eh-x-urwb
Cisco
Iw9167eh-x-urwb
Vendor
Cisco
Product
Iw9167eh-x-wgb
Cisco
Iw9167eh-x-wgb
Vendor
Cisco
Product
Iw9167ih-x-ap
Cisco
Iw9167ih-x-ap
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
