← Database

CVE-2023-20112

HIGH CVSS: 7.4 Published: 2023-03-23 Modified: 2026-06-17

Description

A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition.

Affected Platforms

Cisco Catalyst 9124Axi FirmwareCisco Catalyst 9105ICisco Catalyst 9105WCisco Catalyst 9124AxCisco Catalyst 9120Axe FirmwareCisco Catalyst 9120AxeCisco Catalyst 9105Axi FirmwareCisco Catalyst 9120Axp FirmwareCisco Catalyst 9105I FirmwareCisco Catalyst 9115Axe Firmware

Weakness Type

CWE-126, CWE-125

References