Lucene search

K
nvd[email protected]NVD:CVE-2023-20226
HistorySep 27, 2023 - 6:15 p.m.

CVE-2023-20226

2023-09-2718:15:11
CWE-456
web.nvd.nist.gov
cisco
dos
vulnerability
ios xe software

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.0%

A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.

This vulnerability is due to the mishandling of a crafted packet stream through the AppQoE or UTD application. An attacker could exploit this vulnerability by sending a crafted packet stream through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Affected configurations

NVD
Node
ciscoios_xeMatch17.7.1
OR
ciscoios_xeMatch17.7.1a
OR
ciscoios_xeMatch17.7.2
OR
ciscoios_xeMatch17.8.1
OR
ciscoios_xeMatch17.8.1a
OR
ciscoios_xeMatch17.9.1
OR
ciscoios_xeMatch17.9.1a
OR
ciscoios_xeMatch17.9.2
OR
ciscoios_xeMatch17.9.2a
OR
ciscoios_xeMatch17.10.1
OR
ciscoios_xeMatch17.10.1a
AND
ciscocatalyst_8000v_edgeMatch-
OR
cisco1100-4g_integrated_services_routerMatch-
OR
cisco1100-4gltegb_integrated_services_routerMatch-
OR
cisco1100-4gltena_integrated_services_routerMatch-
OR
cisco1100-6g_integrated_services_routerMatch-
OR
cisco4221_integrated_services_routerMatch-
OR
cisco4321\/k9-rf_integrated_services_routerMatch-
OR
cisco4321\/k9-ws_integrated_services_routerMatch-
OR
cisco4321\/k9_integrated_services_routerMatch-
OR
cisco4321_integrated_services_routerMatch-
OR
cisco4331\/k9-rf_integrated_services_routerMatch-
OR
cisco4331\/k9-ws_integrated_services_routerMatch-
OR
cisco4331\/k9_integrated_services_routerMatch-
OR
cisco4331_integrated_services_routerMatch-
OR
cisco4351\/k9-rf_integrated_services_routerMatch-
OR
cisco4351\/k9-ws_integrated_services_routerMatch-
OR
cisco4351\/k9_integrated_services_routerMatch-
OR
cisco4351_integrated_services_routerMatch-
OR
cisco4431_integrated_services_routerMatch-
OR
ciscoc8200-1n-4tMatch-
OR
ciscoc8200l-1n-4tMatch-
OR
ciscoc8500l-8s4xMatch-
OR
ciscocatalyst_8300-1n1s-4t2xMatch-
OR
ciscocatalyst_8300-1n1s-6tMatch-
OR
ciscocatalyst_8300-2n2s-4t2xMatch-
OR
ciscocatalyst_8300-2n2s-6tMatch-
OR
ciscocatalyst_ir8340Match-

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.0%

Related for NVD:CVE-2023-20226