A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service
Published Sep 27, 2023
8.6
HIGHCVSS 3.1
EPSS 0.87%
Description
A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service. This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an affected device as a wireless client and sending a high rate of traffic over an extended period of time. A successful exploit could allow the attacker to cause the Datagram TLS (DTLS) session to tear down and reset, causing a denial of service (DoS) condition.
Affected products
-
- Version 8.10.170.0StatusaffectedConstraints-
- Version
-
- Version 16.10.1StatusaffectedConstraints-
- Version 16.10.1eStatusaffectedConstraints-
- Version 16.11.1StatusaffectedConstraints-
- Version 16.11.1aStatusaffectedConstraints-
- Version 16.11.1bStatusaffectedConstraints-
- Version 16.11.1cStatusaffectedConstraints-
- Version 16.12.1StatusaffectedConstraints-
- Version 16.12.1sStatusaffectedConstraints-
- Version 16.12.1tStatusaffectedConstraints-
- Version 16.12.2sStatusaffectedConstraints-
- Version 16.12.3StatusaffectedConstraints-
- Version 16.12.4StatusaffectedConstraints-
- Version 16.12.4aStatusaffectedConstraints-
- Version 16.12.5StatusaffectedConstraints-
- Version 16.12.6StatusaffectedConstraints-
- Version 16.12.6aStatusaffectedConstraints-
- Version 16.12.7StatusaffectedConstraints-
- Version 16.12.8StatusaffectedConstraints-
- Version 17.1.1StatusaffectedConstraints-
- Version 17.1.1sStatusaffectedConstraints-
- Version 17.1.1tStatusaffectedConstraints-
- Version 17.2.1StatusaffectedConstraints-
- Version 17.2.1aStatusaffectedConstraints-
- Version 17.2.2StatusaffectedConstraints-
- Version 17.2.3StatusaffectedConstraints-
- Version 17.3.1StatusaffectedConstraints-
- Version 17.3.2StatusaffectedConstraints-
- Version 17.3.2aStatusaffectedConstraints-
- Version 17.3.3StatusaffectedConstraints-
- Version 17.3.4cStatusaffectedConstraints-
- Version 17.3.5aStatusaffectedConstraints-
- Version 17.3.6StatusaffectedConstraints-
- Version 17.4.1StatusaffectedConstraints-
- Version 17.4.2StatusaffectedConstraints-
- Version 17.5.1StatusaffectedConstraints-
- Version 17.6.1StatusaffectedConstraints-
- Version 17.6.2StatusaffectedConstraints-
- Version 17.6.3StatusaffectedConstraints-
- Version 17.6.4StatusaffectedConstraints-
- Version 17.6.5StatusaffectedConstraints-
- Version 17.7.1StatusaffectedConstraints-
- Version 17.8.1StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Aironet Access Point Software | n/a |
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Cisco | Cisco Aironet Access Point Software (IOS XE Controller) | n/a |
|
Configuration 1
- < 17.6.6
Running on/with
- n/a
Configuration 2
- < 17.6.6
Running on/with
- n/a
Configuration 3
- < 17.6.6
Running on/with
- n/a
Configuration 4
- < 17.6.6
Running on/with
- n/a
Configuration 5
- < 17.6.6
Running on/with
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (1)
Change history (0)
No recorded changes yet.