CVEvulnerability

CVE-2023-20112

6.5 MEDIUM Published 2023-03-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-03-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.4 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-125, CWE-126

Description

A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition.

Affected configurations

• cisco business 150ax firmware (< 10.3.2.0) • cisco business 151axm firmware (< 10.3.2.0) • cisco catalyst 9105ax firmware (< 10.3.2.0) • cisco catalyst 9105axi firmware (< 10.3.2.0) • cisco catalyst 9105axw firmware (< 10.3.2.0) • cisco catalyst 9105i firmware (< 10.3.2.0) • cisco catalyst 9105w firmware (< 10.3.2.0) • cisco catalyst 9115 firmware (< 10.3.2.0) • cisco catalyst 9115ax firmware (< 10.3.2.0) • cisco catalyst 9115axe firmware (< 10.3.2.0) • cisco catalyst 9115axi firmware (< 10.3.2.0) • cisco catalyst 9117 firmware (< 10.3.2.0) • cisco catalyst 9117ax firmware (< 10.3.2.0) • cisco catalyst 9117axi firmware (< 10.3.2.0) • cisco catalyst 9120 firmware (< 10.3.2.0) • cisco catalyst 9120ax firmware (< 10.3.2.0) • cisco catalyst 9120axe firmware (< 10.3.2.0) • cisco catalyst 9120axi firmware (< 10.3.2.0) • cisco catalyst 9120axp firmware (< 10.3.2.0) • cisco catalyst 9124 firmware (< 10.3.2.0) • cisco catalyst 9124ax firmware (< 10.3.2.0) • cisco catalyst 9124axd firmware (< 10.3.2.0) • cisco catalyst 9124axi firmware (< 10.3.2.0) • cisco catalyst 9130 firmware (< 10.3.2.0) • cisco catalyst 9130ax firmware (< 10.3.2.0) • cisco catalyst 9130axe firmware (< 10.3.2.0) • cisco catalyst 9130axi firmware (< 10.3.2.0) • cisco catalyst 9136 firmware (< 10.3.2.0) • cisco catalyst 9162 firmware (< 10.3.2.0) • cisco catalyst 9164 firmware (< 10.3.2.0) • cisco catalyst 9166 firmware (< 10.3.2.0)

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-126 Buffer Over-read weakness

References