← Database

CVE-2023-20202

MEDIUM CVSS: 6.1 Published: 2023-09-27 Modified: 2026-06-17

Description

A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper memory management. An attacker could exploit this vulnerability by sending a series of network requests to an affected device. A successful exploit could allow the attacker to cause the wncd process to consume available memory and eventually cause the device to reload, resulting in a DoS condition.

Affected Platforms

Cisco Catalyst 9800-40Cisco Iw9167Eh-X-UrwbCisco Catalyst 9105ICisco Catalyst 9105WCisco Esw6300Cisco Iw9167Eh-X-ApCisco Catalyst 9120Cisco Catalyst 9162Cisco Catalyst 9124ICisco Catalyst 9800-L

Weakness Type

CWE-789, NVD-CWE-noinfo

References