Vulnerability Details CVE-2023-20176
A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service.
This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an affected device as a wireless client and sending a high rate of traffic over an extended period of time. A successful exploit could allow the attacker to cause the Datagram TLS (DTLS) session to tear down and reset, causing a denial of service (DoS) condition.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.9%
CVSS Severity
CVSS v3 Score 5.8
References
Products affected by CVE-2023-20176
-
cpe:2.3:h:cisco:catalyst_9124:-
-
cpe:2.3:h:cisco:catalyst_9130:-
-
cpe:2.3:h:cisco:catalyst_9136:-
-
cpe:2.3:h:cisco:catalyst_9164:-
-
cpe:2.3:h:cisco:catalyst_9166:-
-
cpe:2.3:o:cisco:catalyst_9124_firmware:-
-
cpe:2.3:o:cisco:catalyst_9130_firmware:-
-
cpe:2.3:o:cisco:catalyst_9136_firmware:*
-
cpe:2.3:o:cisco:catalyst_9164_firmware:*
-
cpe:2.3:o:cisco:catalyst_9166_firmware:*