HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2023-20112

CVSS 7.4v3.1pub. 2023-03-23upd. 2024-11-21

A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

  • Cisco Business 150ax

    HW
    Cisco
    all versions

  • Cisco Business 150ax Firmware

    OS
    Cisco
    < 10.3.2.0

  • Cisco Business 151axm

    HW
    Cisco
    all versions

  • Cisco Business 151axm Firmware

    OS
    Cisco
    < 10.3.2.0

  • Cisco Catalyst 9105ax

    HW
    Cisco
    all versions

  • Cisco Catalyst 9105ax Firmware

    OS
    Cisco
    < 10.3.2.0

  • Cisco Catalyst 9105axi

    HW
    Cisco
    all versions

  • Cisco Catalyst 9105axi Firmware

    OS
    Cisco
    < 10.3.2.0

  • Cisco Catalyst 9105axw

    HW
    Cisco
    all versions

  • Cisco Catalyst 9105axw Firmware

    OS
    Cisco
    < 10.3.2.0

  • Cisco Catalyst 9105i

    HW
    Cisco
    all versions

  • Cisco Catalyst 9105i Firmware

    OS
    Cisco
    < 10.3.2.0

  • Cisco Catalyst 9105w

    HW
    Cisco
    all versions

  • Cisco Catalyst 9105w Firmware

    OS
    Cisco
    < 10.3.2.0

  • Cisco Catalyst 9115

    HW
    Cisco
    all versions

  • Cisco Catalyst 9115ax

    HW
    Cisco
    all versions

  • Cisco Catalyst 9115axe

    HW
    Cisco
    all versions

  • Cisco Catalyst 9115axe Firmware

    OS
    Cisco
    < 10.3.2.0

  • Cisco Catalyst 9115ax Firmware

    OS
    Cisco
    < 10.3.2.0

  • Cisco Catalyst 9115axi

    HW
    Cisco
    all versions

  • Cisco Catalyst 9115axi Firmware

    OS
    Cisco
    < 10.3.2.0

  • Cisco Catalyst 9115 Firmware

    OS
    Cisco
    < 10.3.2.0

  • Cisco Catalyst 9117

    HW
    Cisco
    all versions

  • Cisco Catalyst 9117ax

    HW
    Cisco
    all versions

  • Cisco Catalyst 9117ax Firmware

    OS
    Cisco
    < 10.3.2.0

  • Cisco Catalyst 9117axi

    HW
    Cisco
    all versions

  • Cisco Catalyst 9117axi Firmware

    OS
    Cisco
    < 10.3.2.0

  • Cisco Catalyst 9117 Firmware

    OS
    Cisco
    < 10.3.2.0

  • Cisco Catalyst 9120

    HW
    Cisco
    all versions

  • Cisco Catalyst 9120ax

    HW
    Cisco
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2024-20303HIGH7.4same product

A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controll...

CVE-2024-20271HIGH8.6same product

A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated...

CVE-2024-20259HIGH8.6same product

A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote a...

CVE-2023-20231HIGH8.8same product

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perfor...

CVE-2022-20855HIGH7.9same product

A vulnerability in the self-healing functionality of Cisco IOS XE Software for Embedded Wireless Controllers o...