Lucene search

K
cve[email protected]CVE-2023-20226
HistorySep 27, 2023 - 6:15 p.m.

CVE-2023-20226

2023-09-2718:15:11
CWE-456
web.nvd.nist.gov
34
cisco
ios xe software
vulnerability
appqoe
utd
dos
nvd

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

27.0%

A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.

This vulnerability is due to the mishandling of a crafted packet stream through the AppQoE or UTD application. An attacker could exploit this vulnerability by sending a crafted packet stream through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Affected configurations

NVD
Node
ciscoios_xeMatch17.7.1
OR
ciscoios_xeMatch17.7.1a
OR
ciscoios_xeMatch17.7.2
OR
ciscoios_xeMatch17.8.1
OR
ciscoios_xeMatch17.8.1a
OR
ciscoios_xeMatch17.9.1
OR
ciscoios_xeMatch17.9.1a
OR
ciscoios_xeMatch17.9.2
OR
ciscoios_xeMatch17.9.2a
OR
ciscoios_xeMatch17.10.1
OR
ciscoios_xeMatch17.10.1a
AND
ciscocatalyst_8000v_edgeMatch-
OR
cisco1100-4g_integrated_services_routerMatch-
OR
cisco1100-4gltegb_integrated_services_routerMatch-
OR
cisco1100-4gltena_integrated_services_routerMatch-
OR
cisco1100-6g_integrated_services_routerMatch-
OR
cisco4221_integrated_services_routerMatch-
OR
cisco4321\/k9-rf_integrated_services_routerMatch-
OR
cisco4321\/k9-ws_integrated_services_routerMatch-
OR
cisco4321\/k9_integrated_services_routerMatch-
OR
cisco4321_integrated_services_routerMatch-
OR
cisco4331\/k9-rf_integrated_services_routerMatch-
OR
cisco4331\/k9-ws_integrated_services_routerMatch-
OR
cisco4331\/k9_integrated_services_routerMatch-
OR
cisco4331_integrated_services_routerMatch-
OR
cisco4351\/k9-rf_integrated_services_routerMatch-
OR
cisco4351\/k9-ws_integrated_services_routerMatch-
OR
cisco4351\/k9_integrated_services_routerMatch-
OR
cisco4351_integrated_services_routerMatch-
OR
cisco4431_integrated_services_routerMatch-
OR
ciscoc8200-1n-4tMatch-
OR
ciscoc8200l-1n-4tMatch-
OR
ciscoc8500l-8s4xMatch-
OR
ciscocatalyst_8300-1n1s-4t2xMatch-
OR
ciscocatalyst_8300-1n1s-6tMatch-
OR
ciscocatalyst_8300-2n2s-4t2xMatch-
OR
ciscocatalyst_8300-2n2s-6tMatch-
OR
ciscocatalyst_ir8340Match-

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco IOS XE Software",
    "versions": [
      {
        "version": "17.7.1",
        "status": "affected"
      },
      {
        "version": "17.7.1a",
        "status": "affected"
      },
      {
        "version": "17.7.2",
        "status": "affected"
      },
      {
        "version": "17.10.1",
        "status": "affected"
      },
      {
        "version": "17.10.1a",
        "status": "affected"
      },
      {
        "version": "17.8.1",
        "status": "affected"
      },
      {
        "version": "17.8.1a",
        "status": "affected"
      },
      {
        "version": "17.9.1",
        "status": "affected"
      },
      {
        "version": "17.9.2",
        "status": "affected"
      },
      {
        "version": "17.9.1a",
        "status": "affected"
      },
      {
        "version": "17.9.2a",
        "status": "affected"
      }
    ]
  }
]

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

27.0%

Related for CVE-2023-20226