Lucene search
HistorySep 27, 2023 - 6:15 p.m.
CVE-2023-20227
cisco
l2tp
vulnerability
denial of service
remote attacker
dos
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.5
Confidence
High
EPSS
0.001
Percentile
32.9%
A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to improper handling of certain L2TP packets. An attacker could exploit this vulnerability by sending crafted L2TP packets to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.
Note: Only traffic directed to the affected system can be used to exploit this vulnerability.
Affected configurations
Node
ciscoios_xeMatch16.8.1
ORciscoios_xeMatch16.8.1a
ORciscoios_xeMatch16.8.1b
ORciscoios_xeMatch16.8.1c
ORciscoios_xeMatch16.8.1d
ORciscoios_xeMatch16.8.1e
ORciscoios_xeMatch16.8.1s
ORciscoios_xeMatch16.8.2
ORciscoios_xeMatch16.8.3
ORciscoios_xeMatch16.9.1
ORciscoios_xeMatch16.9.1a
ORciscoios_xeMatch16.9.1b
ORciscoios_xeMatch16.9.1s
ORciscoios_xeMatch16.9.2
ORciscoios_xeMatch16.9.3
ORciscoios_xeMatch16.9.4
ORciscoios_xeMatch16.9.5
ORciscoios_xeMatch16.9.5f
ORciscoios_xeMatch16.9.6
ORciscoios_xeMatch16.9.7
ORciscoios_xeMatch16.9.8
ORciscoios_xeMatch16.10.1
ORciscoios_xeMatch16.10.1a
ORciscoios_xeMatch16.10.1b
ORciscoios_xeMatch16.10.1c
ORciscoios_xeMatch16.10.1d
ORciscoios_xeMatch16.10.1e
ORciscoios_xeMatch16.10.1f
ORciscoios_xeMatch16.10.1g
ORciscoios_xeMatch16.10.1s
ORciscoios_xeMatch16.10.2
ORciscoios_xeMatch16.10.3
ORciscoios_xeMatch16.11.1
ORciscoios_xeMatch16.11.1a
ORciscoios_xeMatch16.11.1b
ORciscoios_xeMatch16.11.1s
ORciscoios_xeMatch16.11.2
ORciscoios_xeMatch16.12.1
ORciscoios_xeMatch16.12.1a
ORciscoios_xeMatch16.12.1c
ORciscoios_xeMatch16.12.1s
ORciscoios_xeMatch16.12.1t
ORciscoios_xeMatch16.12.1w
ORciscoios_xeMatch16.12.1x
ORciscoios_xeMatch16.12.1y
ORciscoios_xeMatch16.12.1z1
ORciscoios_xeMatch16.12.1z2
ORciscoios_xeMatch16.12.2
ORciscoios_xeMatch16.12.2a
ORciscoios_xeMatch16.12.2s
ORciscoios_xeMatch16.12.3
ORciscoios_xeMatch16.12.3s
ORciscoios_xeMatch16.12.4
ORciscoios_xeMatch16.12.4a
ORciscoios_xeMatch16.12.5
ORciscoios_xeMatch16.12.5a
ORciscoios_xeMatch16.12.6
ORciscoios_xeMatch16.12.6a
ORciscoios_xeMatch16.12.7
ORciscoios_xeMatch16.12.8
ORciscoios_xeMatch17.1.1
ORciscoios_xeMatch17.1.1a
ORciscoios_xeMatch17.1.1s
ORciscoios_xeMatch17.1.1t
ORciscoios_xeMatch17.1.3
ORciscoios_xeMatch17.2.1
ORciscoios_xeMatch17.2.1a
ORciscoios_xeMatch17.2.1r
ORciscoios_xeMatch17.2.1v
ORciscoios_xeMatch17.2.2
ORciscoios_xeMatch17.2.3
ORciscoios_xeMatch17.3.1
ORciscoios_xeMatch17.3.1a
ORciscoios_xeMatch17.3.1w
ORciscoios_xeMatch17.3.1x
ORciscoios_xeMatch17.3.1z
ORciscoios_xeMatch17.3.2
ORciscoios_xeMatch17.3.2a
ORciscoios_xeMatch17.3.3
ORciscoios_xeMatch17.3.4
ORciscoios_xeMatch17.3.4a
ORciscoios_xeMatch17.3.4c
ORciscoios_xeMatch17.3.5
ORciscoios_xeMatch17.3.5a
ORciscoios_xeMatch17.3.5b
ORciscoios_xeMatch17.3.6
ORciscoios_xeMatch17.3.7
ORciscoios_xeMatch17.4.1
ORciscoios_xeMatch17.4.1a
ORciscoios_xeMatch17.4.1b
ORciscoios_xeMatch17.4.2
ORciscoios_xeMatch17.4.2a
ORciscoios_xeMatch17.5.1
ORciscoios_xeMatch17.5.1a
ORciscoios_xeMatch17.5.1b
ORciscoios_xeMatch17.5.1c
ciscocatalyst_8000v_edgeMatch-
ORciscocloud_services_router_1000vMatch-
ORcisco1000_integrated_services_routerMatch-
ORcisco1100-4g_integrated_services_routerMatch-
ORcisco1100-4gltegb_integrated_services_routerMatch-
ORcisco1100-4gltena_integrated_services_routerMatch-
ORcisco1100-6g_integrated_services_routerMatch-
ORcisco4221_integrated_services_routerMatch-
ORcisco4321\/k9-rf_integrated_services_routerMatch-
ORcisco4321\/k9-ws_integrated_services_routerMatch-
ORcisco4321\/k9_integrated_services_routerMatch-
ORcisco4321_integrated_services_routerMatch-
ORcisco4331\/k9-rf_integrated_services_routerMatch-
ORcisco4331\/k9-ws_integrated_services_routerMatch-
ORcisco4331\/k9_integrated_services_routerMatch-
ORcisco4331_integrated_services_routerMatch-
ORcisco4351\/k9-rf_integrated_services_routerMatch-
ORcisco4351\/k9-ws_integrated_services_routerMatch-
ORcisco4351\/k9_integrated_services_routerMatch-
ORcisco4351_integrated_services_routerMatch-
ORcisco4431_integrated_services_routerMatch-
ORcisco4451_integrated_services_routerMatch-
ORcisco4461_integrated_services_routerMatch-
ORciscoc8200-1n-4tMatch-
ORciscoc8200l-1n-4tMatch-
ORciscoc8500l-8s4xMatch-
ORciscocatalyst_8300-1n1s-4t2xMatch-
ORciscocatalyst_8300-1n1s-6tMatch-
ORciscocatalyst_8300-2n2s-4t2xMatch-
ORciscocatalyst_8300-2n2s-6tMatch-
ORciscovg400-2fxs\/2fxoMatch-
ORciscovg400-4fxs\/4fxoMatch-
ORciscovg400-6fxs\/6fxoMatch-
ORciscovg400-8fxsMatch-
ORciscovg420-132fxs\/6fxoMatch-
ORciscovg420-144fxsMatch-
ORciscovg420-84fxs\/6fxoMatch-
ORciscovg450-144fxs\/k9Match-
ORciscovg450-72fxs\/k9Match-
ORciscovg450\/k9Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | ios_xe | 16.8.1 | cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:* |
| cisco | ios_xe | 16.8.1a | cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:* |
| cisco | ios_xe | 16.8.1b | cpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:* |
| cisco | ios_xe | 16.8.1c | cpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:* |
| cisco | ios_xe | 16.8.1d | cpe:2.3:o:cisco:ios_xe:16.8.1d:*:*:*:*:*:*:* |
| cisco | ios_xe | 16.8.1e | cpe:2.3:o:cisco:ios_xe:16.8.1e:*:*:*:*:*:*:* |
| cisco | ios_xe | 16.8.1s | cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:* |
| cisco | ios_xe | 16.8.2 | cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:* |
| cisco | ios_xe | 16.8.3 | cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:* |
| cisco | ios_xe | 16.9.1 | cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2023-09-27 18:15:00
cisco
cisco
nessus
nessus
cvelist
cvelist
CVE-2023-20227
2023-09-27 17:21:38
cve
cve
CVE-2023-20227
2023-09-27 18:15:11
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.5
Confidence
High
EPSS
0.001
Percentile
32.9%
Related for NVD:CVE-2023-20227