Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-20176

Опубликовано: 27 сент. 2023
Источник: nvd
CVSS3: 5.8
CVSS3: 8.6
EPSS Низкий

Описание

A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service.

This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an affected device as a wireless client and sending a high rate of traffic over an extended period of time. A successful exploit could allow the attacker to cause the Datagram TLS (DTLS) session to tear down and reset, causing a denial of service (DoS) condition.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:cisco:catalyst_9166_firmware:*:*:*:*:*:*:*:*
Версия до 17.6.6 (исключая)
cpe:2.3:h:cisco:catalyst_9166:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:o:cisco:catalyst_9164_firmware:*:*:*:*:*:*:*:*
Версия до 17.6.6 (исключая)
cpe:2.3:h:cisco:catalyst_9164:-:*:*:*:*:*:*:*
Конфигурация 3

Одновременно

cpe:2.3:o:cisco:catalyst_9136_firmware:*:*:*:*:*:*:*:*
Версия до 17.6.6 (исключая)
cpe:2.3:h:cisco:catalyst_9136:-:*:*:*:*:*:*:*
Конфигурация 4

Одновременно

cpe:2.3:o:cisco:catalyst_9130_firmware:*:*:*:*:*:*:*:*
Версия до 17.6.6 (исключая)
cpe:2.3:h:cisco:catalyst_9130:-:*:*:*:*:*:*:*
Конфигурация 5

Одновременно

cpe:2.3:o:cisco:catalyst_9124_firmware:*:*:*:*:*:*:*:*
Версия до 17.6.6 (исключая)
cpe:2.3:h:cisco:catalyst_9124:-:*:*:*:*:*:*:*

EPSS

Процентиль: 32%
0.00123
Низкий

5.8 Medium

CVSS3

8.6 High

CVSS3

Дефекты

CWE-400
CWE-400

Связанные уязвимости

CVSS3: 5.8
github
больше 2 лет назад

A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service. This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an affected device as a wireless client and sending a high rate of traffic over an extended period of time. A successful exploit could allow the attacker to cause the Datagram TLS (DTLS) session to tear down and reset, causing a denial of service (DoS) condition.

CVSS3: 5.8
fstec
больше 3 лет назад

Уязвимость компонента networking микропрограммного обеспечения точек доступа Cisco Catalyst 9124, Catalyst 9130, Catalyst 9136, Catalyst 9164 и Catalyst 9166, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 32%
0.00123
Низкий

5.8 Medium

CVSS3

8.6 High

CVSS3

Дефекты

CWE-400
CWE-400