Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-20202

A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper memory management. An attacker could exploit this vulnerability by sending a series of network requests to an affected device. A successful exploit could allow the attacker to cause the wncd process to consume available memory and eventually cause the device to reload, resulting in a DoS condition.

Published

2023-09-27T18:15:11.177

Last Modified

2024-11-21T07:40:49.307

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-789
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios_xe 17.9.1 Yes
Operating System cisco ios_xe 17.9.1a Yes
Operating System cisco ios_xe 17.9.1w Yes
Operating System cisco ios_xe 17.9.1x Yes
Operating System cisco ios_xe 17.9.1x1 Yes
Operating System cisco ios_xe 17.9.1y Yes
Operating System cisco ios_xe 17.9.2 Yes
Operating System cisco ios_xe 17.9.2a Yes
Operating System cisco ios_xe 17.9.2b Yes
Operating System cisco ios_xe 17.10.1 Yes
Operating System cisco ios_xe 17.10.1a Yes
Operating System cisco ios_xe 17.10.1b Yes
Hardware cisco catalyst_9105i - No
Hardware cisco catalyst_9105w - No
Hardware cisco catalyst_9115 - No
Hardware cisco catalyst_9120 - No
Hardware cisco catalyst_9124d - No
Hardware cisco catalyst_9124e - No
Hardware cisco catalyst_9124i - No
Hardware cisco catalyst_9130 - No
Hardware cisco catalyst_9136 - No
Hardware cisco catalyst_9162 - No
Hardware cisco catalyst_9164 - No
Hardware cisco catalyst_9166 - No
Hardware cisco catalyst_9166d1 - No
Hardware cisco catalyst_9800-40 - No
Hardware cisco catalyst_9800-80 - No
Hardware cisco catalyst_9800-cl - No
Hardware cisco catalyst_9800-l - No
Hardware cisco catalyst_iw6300 - No
Hardware cisco esw6300 - No
Hardware cisco iw9167eh-x-ap - No
Hardware cisco iw9167eh-x-urwb - No
Hardware cisco iw9167eh-x-wgb - No
Hardware cisco iw9167ih-x-ap - No
References