CVE-2023-20226
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.
This vulnerability is due to the mishandling of a crafted packet stream through the AppQoE or UTD application. An attacker could exploit this vulnerability by sending a crafted packet stream through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Affected (11)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 17.10.1 |
| Running on/with | Platform Versions |
|---|---|
Cisco 1100 4g Integrated Services Router | All versions |
Cisco 1100 4gltegb Integrated Services Router | All versions |
Cisco 1100 4gltena Integrated Services Router | All versions |
Cisco 1100 6g Integrated Services Router | All versions |
Cisco 4221 Integrated Services Router | All versions |
Cisco 4321/k9 Rf Integrated Services Router | All versions |
Cisco 4321/k9 Ws Integrated Services Router | All versions |
Cisco 4321/k9 Integrated Services Router | All versions |
Cisco 4321 Integrated Services Router | All versions |
Cisco 4331/k9 Rf Integrated Services Router | All versions |
Cisco 4331/k9 Ws Integrated Services Router | All versions |
Cisco 4331/k9 Integrated Services Router | All versions |
Cisco 4331 Integrated Services Router | All versions |
Cisco 4351/k9 Rf Integrated Services Router | All versions |
Cisco 4351/k9 Ws Integrated Services Router | All versions |
Cisco 4351/k9 Integrated Services Router | All versions |
Cisco 4351 Integrated Services Router | All versions |
Cisco 4431 Integrated Services Router | All versions |
Cisco C8200 1n 4t | All versions |
Cisco C8200l 1n 4t | All versions |
Cisco C8500l 8s4x | All versions |
Cisco Catalyst 8000v Edge | All versions |
Cisco Catalyst 8300 1n1s 4t2x | All versions |
Cisco Catalyst 8300 1n1s 6t | All versions |
Cisco Catalyst 8300 2n2s 4t2x | All versions |
Cisco Catalyst 8300 2n2s 6t | All versions |
Cisco Catalyst Ir8340 | All versions |
References (2)
Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.