Vulnerabilities > CVE-2023-20202 - Unspecified vulnerability in Cisco IOS XE

CVSS 6.5 - MEDIUM

Attack vector

ADJACENT_NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

low complexity

cisco

NVD

Published: 2023-09-27

Updated: 2024-11-21

Summary

A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper memory management. An attacker could exploit this vulnerability by sending a series of network requests to an affected device. A successful exploit could allow the attacker to cause the wncd process to consume available memory and eventually cause the device to reload, resulting in a DoS condition.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS XE 17.9.1 Cisco IOS XE 17.9.1A Cisco IOS XE 17.9.1W Cisco IOS XE 17.9.1X Cisco IOS XE 17.9.1X1 Cisco IOS XE 17.9.1Y Cisco IOS XE 17.9.2 Cisco IOS XE 17.9.2A Cisco IOS XE 17.9.2B Cisco IOS XE 17.10.1 Cisco IOS XE 17.10.1A Cisco IOS XE 17.10.1B	12
Hardware	Cisco Cisco Catalyst 9105I - Cisco Catalyst 9105W - Cisco Catalyst 9115 - Cisco Catalyst 9120 - Cisco Catalyst 9124D - Cisco Catalyst 9124E - Cisco Catalyst 9124I - Cisco Catalyst 9130 - Cisco Catalyst 9136 - Cisco Catalyst 9162 - Cisco Catalyst 9164 - Cisco Catalyst 9166 - Cisco Catalyst 9166D1 - Cisco Catalyst 9800 40 - Cisco Catalyst 9800 80 - Cisco Catalyst 9800 CL - Cisco Catalyst 9800 L - Cisco Catalyst Iw6300 - Cisco Esw6300 - Cisco Iw9167Eh X AP - Cisco Iw9167Eh X Urwb - Cisco Iw9167Eh X WGB - Cisco Iw9167Ih X AP -	23

Summary

Vulnerable Configurations

References