← Database

CVE-2023-20176

MEDIUM CVSS: 5.8 Published: 2023-09-27 Modified: 2026-06-17

Description

A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service. This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an affected device as a wireless client and sending a high rate of traffic over an extended period of time. A successful exploit could allow the attacker to cause the Datagram TLS (DTLS) session to tear down and reset, causing a denial of service (DoS) condition.

Affected Platforms

Cisco Catalyst 9124Cisco Catalyst 9164 FirmwareCisco Catalyst 9136Cisco Catalyst 9130Cisco Catalyst 9164Cisco Catalyst 9124 FirmwareCisco Catalyst 9130 FirmwareCisco Catalyst 9136 FirmwareCisco Catalyst 9166 FirmwareCisco Catalyst 9166

Weakness Type

CWE-400, CWE-400

References