← Back

CVE-2023-20202

nvd nist
Published: Sep 27, 2023Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper memory management. An attacker could exploit this vulnerability by sending a series of network requests to an affected device. A successful exploit could allow the attacker to cause the wncd process to consume available memory and eventually cause the device to reload, resulting in a DoS condition.

Affected (12)

Products: Cisco: Ios Xe
1 product
Ios Xe
Configuration A
12 vulnerable · 23 platform
Vulnerable SoftwareAffected Versions
Cisco
Version 17.10.1
Version 17.10.1a
Version 17.10.1b
Version 17.9.1
Version 17.9.1a
Version 17.9.1w
Version 17.9.1x1
Version 17.9.1x
Version 17.9.1y
Version 17.9.2
Version 17.9.2a
Version 17.9.2b
Running on/withPlatform Versions
Cisco
Catalyst 9105i
All versions
Cisco
Catalyst 9105w
All versions
Cisco
Catalyst 9115
All versions
Cisco
Catalyst 9120
All versions
Cisco
Catalyst 9124d
All versions
Cisco
Catalyst 9124e
All versions
Cisco
Catalyst 9124i
All versions
Cisco
Catalyst 9130
All versions
Cisco
Catalyst 9136
All versions
Cisco
Catalyst 9162
All versions
Cisco
Catalyst 9164
All versions
Cisco
Catalyst 9166
All versions
Cisco
Catalyst 9166d1
All versions
Cisco
Catalyst 9800 40
All versions
Cisco
Catalyst 9800 80
All versions
Cisco
Catalyst 9800 Cl
All versions
Cisco
Catalyst 9800 L
All versions
Cisco
Catalyst Iw6300
All versions
Cisco
Esw6300
All versions
Cisco
Iw9167eh X Ap
All versions
Cisco
Iw9167eh X Urwb
All versions
Cisco
Iw9167eh X Wgb
All versions
Cisco
Iw9167ih X Ap
All versions

Timeline

No history available yet.