Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistCiscoCVELIST:CVE-2023-20251
HistorySep 27, 2023 - 5:25 p.m.

CVE-2023-20251

2023-09-2717:25:25
cisco
www.cve.org
1
cisco wireless lan controller
aireos software
memory buffer vulnerability
dos
denial of service

6.1 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

12.7%

JSON

A vulnerability in the memory buffer of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause memory leaks that could eventually lead to a device reboot.

This vulnerability is due to memory leaks caused by multiple clients connecting under specific conditions. An attacker could exploit this vulnerability by causing multiple wireless clients to attempt to connect to an access point (AP) on an affected device. A successful exploit could allow the attacker to cause the affected device to reboot after a significant amount of time, resulting in a denial of service (DoS) condition.

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco Wireless LAN Controller (WLC)",
    "versions": [
      {
        "version": "8.10.162.0",
        "status": "affected"
      },
      {
        "version": "8.10.151.0",
        "status": "affected"
      },
      {
        "version": "8.10.171.0",
        "status": "affected"
      },
      {
        "version": "8.10.170.0",
        "status": "affected"
      },
      {
        "version": "8.10.181.0",
        "status": "affected"
      },
      {
        "version": "8.10.182.0",
        "status": "affected"
      },
      {
        "version": "8.10.183.0",
        "status": "affected"
      },
      {
        "version": "8.10.185.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Cisco",
    "product": "Cisco Mobility Express",
    "versions": [
      {
        "version": "8.10.183.0",
        "status": "affected"
      },
      {
        "version": "8.10.162.0",
        "status": "affected"
      },
      {
        "version": "8.10.151.0",
        "status": "affected"
      },
      {
        "version": "8.10.185.0",
        "status": "affected"
      },
      {
        "version": "8.10.171.0",
        "status": "affected"
      },
      {
        "version": "8.10.182.0",
        "status": "affected"
      },
      {
        "version": "8.10.181.0",
        "status": "affected"
      }
    ]
  }
]

Related

cnvd 1
cisco 1
prion 1
cve 1
nvd 1
cnvd
cnvd
Cisco Wireless LAN Controller Buffer Overflow Vulnerability
2023-10-13 00:00:00
cisco
cisco
Cisco Wireless LAN Controller AireOS Software Denial of Service Vulnerability
2023-09-27 16:00:00
prion
prion
Design/Logic Flaw
2023-09-27 18:15:00
cve
cve
CVE-2023-20251
2023-09-27 18:15:11
nvd
nvd
CVE-2023-20251
2023-09-27 18:15:11

6.1 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

12.7%

JSON
Related for CVELIST:CVE-2023-20251
cnvd1cisco1prion1cve1nvd1