Cisco AP Software Unauth DoS via Resource Exhaustion
CVE-2023-20268 Published on September 27, 2023

Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability
A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device.  This vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic.

NVD

Vulnerability Analysis

Attack Vector:
ADJACENT_NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
NONE
Integrity Impact:
NONE
Availability Impact:
LOW

Weakness Type

What is a Resource Exhaustion Vulnerability?

The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

CVE-2023-20268 has been classified to as a Resource Exhaustion vulnerability or weakness.


Products Associated with CVE-2023-20268

Want to know whenever a new CVE is published for Cisco Wireless Lan Controller Software? stack.watch will email you.

Cisco Wireless Lan Controller Software
 

Affected Versions

Cisco Aironet Access Point Software: Cisco Aironet Access Point Software (IOS XE Controller): Cisco Business Wireless Access Point Software:

Exploit Probability

EPSS
0.04%
Percentile
11.41%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.