Lucene search

[email protected]CVE-2023-20056

HistoryMar 23, 2023 - 5:15 p.m.

CVE-2023-20056

2023-03-2317:15:14

CWE-78

[email protected]

web.nvd.nist.gov

vulnerability

management cli

cisco

access point

ap software

authenticated

local attacker

denial of service

dos

nvd

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to cause an affected device to reload spontaneously, resulting in a DoS condition.

Affected configurations

NVD

Node

ciscowireless_lan_controller_softwareRange<8.10.183.0

AND

ciscoesw6300Match-

Node

ciscoaironet_access_point_softwareRange<17.9.0.135

AND

ciscoaironet_1540Match-

ciscoaironet_1542dMatch-

ciscoaironet_1542iMatch-

ciscoaironet_1560Match-

ciscoaironet_1562dMatch-

ciscoaironet_1562eMatch-

ciscoaironet_1562iMatch-

ciscoaironet_1800Match-

ciscoaironet_1800iMatch-

ciscoaironet_1810Match-

ciscoaironet_1810wMatch-

ciscoaironet_1815Match-

ciscoaironet_1815iMatch-

ciscoaironet_1815mMatch-

ciscoaironet_1815tMatch-

ciscoaironet_1815wMatch-

ciscoaironet_2800Match-

ciscoaironet_2800eMatch-

ciscoaironet_2800iMatch-

ciscoaironet_3800Match-

ciscoaironet_3800eMatch-

ciscoaironet_3800iMatch-

ciscoaironet_3800pMatch-

ciscoaironet_4800Match-

ciscocatalyst_9100Match-

ciscocatalyst_9105Match-

ciscocatalyst_9105axMatch-

ciscocatalyst_9105axiMatch-

ciscocatalyst_9105axwMatch-

ciscocatalyst_9115Match-

ciscocatalyst_9115_apMatch-

ciscocatalyst_9115axMatch-

ciscocatalyst_9115axeMatch-

ciscocatalyst_9115axiMatch-

ciscocatalyst_9117Match-

ciscocatalyst_9117_apMatch-

ciscocatalyst_9117axMatch-

ciscocatalyst_9117axiMatch-

ciscocatalyst_9120Match-

ciscocatalyst_9120_apMatch-

ciscocatalyst_9120axMatch-

ciscocatalyst_9120axeMatch-

ciscocatalyst_9120axiMatch-

ciscocatalyst_9120axpMatch-

ciscocatalyst_9124Match-

ciscocatalyst_9124axMatch-

ciscocatalyst_9124axdMatch-

ciscocatalyst_9124axiMatch-

ciscocatalyst_9130Match-

ciscocatalyst_9130_apMatch-

ciscocatalyst_9130axMatch-

ciscocatalyst_9130axeMatch-

ciscocatalyst_9130axiMatch-

ciscocatalyst_iw6300Match-

ciscocatalyst_iw6300_acMatch-

ciscocatalyst_iw6300_dcMatch-

ciscocatalyst_iw6300_dcwMatch-

Node

ciscoios_xeRange<16.12.8

ciscoios_xeRange17.1–17.3.6

ciscoios_xeRange17.4–17.6.5

ciscoios_xeRange17.7–17.9.2

CPENameOperatorVersion
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwarelt8.10.183.0

CPE	Name	Operator	Version
cisco:wireless_lan_controller_software	cisco wireless lan controller software	lt	8.10.183.0

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco Aironet Access Point Software ",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-cli-dos-tc2EKEpu

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2023-20056

nvd1 prion1 cvelist1 cisco1