Lucene search

CiscoCVE-2023-20227

HistorySep 27, 2023 - 6:15 p.m.

CVE-2023-20227

2023-09-2718:15:11

CWE-388

cisco

web.nvd.nist.gov

cve-2023-20227

cisco

ios xe

software

l2tp

dos

vulnerability

nvd

layer 2 tunneling protocol

remote attacker

denial of service

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

EPSS

0.001

Percentile

32.9%

JSON

A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to improper handling of certain L2TP packets. An attacker could exploit this vulnerability by sending crafted L2TP packets to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.

Note: Only traffic directed to the affected system can be used to exploit this vulnerability.

Affected configurations

Nvd

Vulners

Node

ciscoios_xeMatch16.8.1

ciscoios_xeMatch16.8.1a

ciscoios_xeMatch16.8.1b

ciscoios_xeMatch16.8.1c

ciscoios_xeMatch16.8.1d

ciscoios_xeMatch16.8.1e

ciscoios_xeMatch16.8.1s

ciscoios_xeMatch16.8.2

ciscoios_xeMatch16.8.3

ciscoios_xeMatch16.9.1

ciscoios_xeMatch16.9.1a

ciscoios_xeMatch16.9.1b

ciscoios_xeMatch16.9.1s

ciscoios_xeMatch16.9.2

ciscoios_xeMatch16.9.3

ciscoios_xeMatch16.9.4

ciscoios_xeMatch16.9.5

ciscoios_xeMatch16.9.5f

ciscoios_xeMatch16.9.6

ciscoios_xeMatch16.9.7

ciscoios_xeMatch16.9.8

ciscoios_xeMatch16.10.1

ciscoios_xeMatch16.10.1a

ciscoios_xeMatch16.10.1b

ciscoios_xeMatch16.10.1c

ciscoios_xeMatch16.10.1d

ciscoios_xeMatch16.10.1e

ciscoios_xeMatch16.10.1f

ciscoios_xeMatch16.10.1g

ciscoios_xeMatch16.10.1s

ciscoios_xeMatch16.10.2

ciscoios_xeMatch16.10.3

ciscoios_xeMatch16.11.1

ciscoios_xeMatch16.11.1a

ciscoios_xeMatch16.11.1b

ciscoios_xeMatch16.11.1s

ciscoios_xeMatch16.11.2

ciscoios_xeMatch16.12.1

ciscoios_xeMatch16.12.1a

ciscoios_xeMatch16.12.1c

ciscoios_xeMatch16.12.1s

ciscoios_xeMatch16.12.1t

ciscoios_xeMatch16.12.1w

ciscoios_xeMatch16.12.1x

ciscoios_xeMatch16.12.1y

ciscoios_xeMatch16.12.1z1

ciscoios_xeMatch16.12.1z2

ciscoios_xeMatch16.12.2

ciscoios_xeMatch16.12.2a

ciscoios_xeMatch16.12.2s

ciscoios_xeMatch16.12.3

ciscoios_xeMatch16.12.3s

ciscoios_xeMatch16.12.4

ciscoios_xeMatch16.12.4a

ciscoios_xeMatch16.12.5

ciscoios_xeMatch16.12.5a

ciscoios_xeMatch16.12.6

ciscoios_xeMatch16.12.6a

ciscoios_xeMatch16.12.7

ciscoios_xeMatch16.12.8

ciscoios_xeMatch17.1.1

ciscoios_xeMatch17.1.1a

ciscoios_xeMatch17.1.1s

ciscoios_xeMatch17.1.1t

ciscoios_xeMatch17.1.3

ciscoios_xeMatch17.2.1

ciscoios_xeMatch17.2.1a

ciscoios_xeMatch17.2.1r

ciscoios_xeMatch17.2.1v

ciscoios_xeMatch17.2.2

ciscoios_xeMatch17.2.3

ciscoios_xeMatch17.3.1

ciscoios_xeMatch17.3.1a

ciscoios_xeMatch17.3.1w

ciscoios_xeMatch17.3.1x

ciscoios_xeMatch17.3.1z

ciscoios_xeMatch17.3.2

ciscoios_xeMatch17.3.2a

ciscoios_xeMatch17.3.3

ciscoios_xeMatch17.3.4

ciscoios_xeMatch17.3.4a

ciscoios_xeMatch17.3.4c

ciscoios_xeMatch17.3.5

ciscoios_xeMatch17.3.5a

ciscoios_xeMatch17.3.5b

ciscoios_xeMatch17.3.6

ciscoios_xeMatch17.3.7

ciscoios_xeMatch17.4.1

ciscoios_xeMatch17.4.1a

ciscoios_xeMatch17.4.1b

ciscoios_xeMatch17.4.2

ciscoios_xeMatch17.4.2a

ciscoios_xeMatch17.5.1

ciscoios_xeMatch17.5.1a

ciscoios_xeMatch17.5.1b

ciscoios_xeMatch17.5.1c

AND

ciscocatalyst_8000v_edgeMatch-

ciscocloud_services_router_1000vMatch-

cisco1000_integrated_services_routerMatch-

cisco1100-4g_integrated_services_routerMatch-

cisco1100-4gltegb_integrated_services_routerMatch-

cisco1100-4gltena_integrated_services_routerMatch-

cisco1100-6g_integrated_services_routerMatch-

cisco4221_integrated_services_routerMatch-

cisco4321\/k9-rf_integrated_services_routerMatch-

cisco4321\/k9-ws_integrated_services_routerMatch-

cisco4321\/k9_integrated_services_routerMatch-

cisco4321_integrated_services_routerMatch-

cisco4331\/k9-rf_integrated_services_routerMatch-

cisco4331\/k9-ws_integrated_services_routerMatch-

cisco4331\/k9_integrated_services_routerMatch-

cisco4331_integrated_services_routerMatch-

cisco4351\/k9-rf_integrated_services_routerMatch-

cisco4351\/k9-ws_integrated_services_routerMatch-

cisco4351\/k9_integrated_services_routerMatch-

cisco4351_integrated_services_routerMatch-

cisco4431_integrated_services_routerMatch-

cisco4451_integrated_services_routerMatch-

cisco4461_integrated_services_routerMatch-

ciscoc8200-1n-4tMatch-

ciscoc8200l-1n-4tMatch-

ciscoc8500l-8s4xMatch-

ciscocatalyst_8300-1n1s-4t2xMatch-

ciscocatalyst_8300-1n1s-6tMatch-

ciscocatalyst_8300-2n2s-4t2xMatch-

ciscocatalyst_8300-2n2s-6tMatch-

ciscovg400-2fxs\/2fxoMatch-

ciscovg400-4fxs\/4fxoMatch-

ciscovg400-6fxs\/6fxoMatch-

ciscovg400-8fxsMatch-

ciscovg420-132fxs\/6fxoMatch-

ciscovg420-144fxsMatch-

ciscovg420-84fxs\/6fxoMatch-

ciscovg450-144fxs\/k9Match-

ciscovg450-72fxs\/k9Match-

ciscovg450\/k9Match-

VendorProductVersionCPE
ciscoios_xe16.8.1cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*
ciscoios_xe16.8.1acpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*
ciscoios_xe16.8.1bcpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:*
ciscoios_xe16.8.1ccpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:*
ciscoios_xe16.8.1dcpe:2.3:o:cisco:ios_xe:16.8.1d:*:*:*:*:*:*:*
ciscoios_xe16.8.1ecpe:2.3:o:cisco:ios_xe:16.8.1e:*:*:*:*:*:*:*
ciscoios_xe16.8.1scpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*
ciscoios_xe16.8.2cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:*
ciscoios_xe16.8.3cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:*
ciscoios_xe16.9.1cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xe	16.8.1	cpe:2.3:o:cisco:ios_xe:16.8.1:::::::*
cisco	ios_xe	16.8.1a	cpe:2.3:o:cisco:ios_xe:16.8.1a:::::::*
cisco	ios_xe	16.8.1b	cpe:2.3:o:cisco:ios_xe:16.8.1b:::::::*
cisco	ios_xe	16.8.1c	cpe:2.3:o:cisco:ios_xe:16.8.1c:::::::*
cisco	ios_xe	16.8.1d	cpe:2.3:o:cisco:ios_xe:16.8.1d:::::::*
cisco	ios_xe	16.8.1e	cpe:2.3:o:cisco:ios_xe:16.8.1e:::::::*
cisco	ios_xe	16.8.1s	cpe:2.3:o:cisco:ios_xe:16.8.1s:::::::*
cisco	ios_xe	16.8.2	cpe:2.3:o:cisco:ios_xe:16.8.2:::::::*
cisco	ios_xe	16.8.3	cpe:2.3:o:cisco:ios_xe:16.8.3:::::::*
cisco	ios_xe	16.9.1	cpe:2.3:o:cisco:ios_xe:16.9.1:::::::*

Rows per page:

1-10 of 1361

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco IOS XE Software",
    "versions": [
      {
        "version": "16.8.1",
        "status": "affected"
      },
      {
        "version": "16.8.1a",
        "status": "affected"
      },
      {
        "version": "16.8.1b",
        "status": "affected"
      },
      {
        "version": "16.8.1s",
        "status": "affected"
      },
      {
        "version": "16.8.1c",
        "status": "affected"
      },
      {
        "version": "16.8.1d",
        "status": "affected"
      },
      {
        "version": "16.8.2",
        "status": "affected"
      },
      {
        "version": "16.8.1e",
        "status": "affected"
      },
      {
        "version": "16.8.3",
        "status": "affected"
      },
      {
        "version": "16.9.1",
        "status": "affected"
      },
      {
        "version": "16.9.2",
        "status": "affected"
      },
      {
        "version": "16.9.1a",
        "status": "affected"
      },
      {
        "version": "16.9.1b",
        "status": "affected"
      },
      {
        "version": "16.9.1s",
        "status": "affected"
      },
      {
        "version": "16.9.3",
        "status": "affected"
      },
      {
        "version": "16.9.4",
        "status": "affected"
      },
      {
        "version": "16.9.5",
        "status": "affected"
      },
      {
        "version": "16.9.5f",
        "status": "affected"
      },
      {
        "version": "16.9.6",
        "status": "affected"
      },
      {
        "version": "16.9.7",
        "status": "affected"
      },
      {
        "version": "16.9.8",
        "status": "affected"
      },
      {
        "version": "16.10.1",
        "status": "affected"
      },
      {
        "version": "16.10.1a",
        "status": "affected"
      },
      {
        "version": "16.10.1b",
        "status": "affected"
      },
      {
        "version": "16.10.1s",
        "status": "affected"
      },
      {
        "version": "16.10.1c",
        "status": "affected"
      },
      {
        "version": "16.10.1e",
        "status": "affected"
      },
      {
        "version": "16.10.1d",
        "status": "affected"
      },
      {
        "version": "16.10.2",
        "status": "affected"
      },
      {
        "version": "16.10.1f",
        "status": "affected"
      },
      {
        "version": "16.10.1g",
        "status": "affected"
      },
      {
        "version": "16.10.3",
        "status": "affected"
      },
      {
        "version": "16.11.1",
        "status": "affected"
      },
      {
        "version": "16.11.1a",
        "status": "affected"
      },
      {
        "version": "16.11.1b",
        "status": "affected"
      },
      {
        "version": "16.11.2",
        "status": "affected"
      },
      {
        "version": "16.11.1s",
        "status": "affected"
      },
      {
        "version": "16.12.1",
        "status": "affected"
      },
      {
        "version": "16.12.1s",
        "status": "affected"
      },
      {
        "version": "16.12.1a",
        "status": "affected"
      },
      {
        "version": "16.12.1c",
        "status": "affected"
      },
      {
        "version": "16.12.1w",
        "status": "affected"
      },
      {
        "version": "16.12.2",
        "status": "affected"
      },
      {
        "version": "16.12.1y",
        "status": "affected"
      },
      {
        "version": "16.12.2a",
        "status": "affected"
      },
      {
        "version": "16.12.3",
        "status": "affected"
      },
      {
        "version": "16.12.8",
        "status": "affected"
      },
      {
        "version": "16.12.2s",
        "status": "affected"
      },
      {
        "version": "16.12.1x",
        "status": "affected"
      },
      {
        "version": "16.12.1t",
        "status": "affected"
      },
      {
        "version": "16.12.4",
        "status": "affected"
      },
      {
        "version": "16.12.3s",
        "status": "affected"
      },
      {
        "version": "16.12.4a",
        "status": "affected"
      },
      {
        "version": "16.12.5",
        "status": "affected"
      },
      {
        "version": "16.12.6",
        "status": "affected"
      },
      {
        "version": "16.12.1z1",
        "status": "affected"
      },
      {
        "version": "16.12.5a",
        "status": "affected"
      },
      {
        "version": "16.12.1z2",
        "status": "affected"
      },
      {
        "version": "16.12.6a",
        "status": "affected"
      },
      {
        "version": "16.12.7",
        "status": "affected"
      },
      {
        "version": "16.12.10a",
        "status": "affected"
      },
      {
        "version": "17.1.1",
        "status": "affected"
      },
      {
        "version": "17.1.1a",
        "status": "affected"
      },
      {
        "version": "17.1.1s",
        "status": "affected"
      },
      {
        "version": "17.1.1t",
        "status": "affected"
      },
      {
        "version": "17.1.3",
        "status": "affected"
      },
      {
        "version": "17.2.1",
        "status": "affected"
      },
      {
        "version": "17.2.1r",
        "status": "affected"
      },
      {
        "version": "17.2.1a",
        "status": "affected"
      },
      {
        "version": "17.2.1v",
        "status": "affected"
      },
      {
        "version": "17.2.2",
        "status": "affected"
      },
      {
        "version": "17.2.3",
        "status": "affected"
      },
      {
        "version": "17.3.1",
        "status": "affected"
      },
      {
        "version": "17.3.2",
        "status": "affected"
      },
      {
        "version": "17.3.3",
        "status": "affected"
      },
      {
        "version": "17.3.1a",
        "status": "affected"
      },
      {
        "version": "17.3.1w",
        "status": "affected"
      },
      {
        "version": "17.3.2a",
        "status": "affected"
      },
      {
        "version": "17.3.1x",
        "status": "affected"
      },
      {
        "version": "17.3.1z",
        "status": "affected"
      },
      {
        "version": "17.3.4",
        "status": "affected"
      },
      {
        "version": "17.3.5",
        "status": "affected"
      },
      {
        "version": "17.3.4a",
        "status": "affected"
      },
      {
        "version": "17.3.6",
        "status": "affected"
      },
      {
        "version": "17.3.4c",
        "status": "affected"
      },
      {
        "version": "17.3.5a",
        "status": "affected"
      },
      {
        "version": "17.3.5b",
        "status": "affected"
      },
      {
        "version": "17.3.7",
        "status": "affected"
      },
      {
        "version": "17.4.1",
        "status": "affected"
      },
      {
        "version": "17.4.2",
        "status": "affected"
      },
      {
        "version": "17.4.1a",
        "status": "affected"
      },
      {
        "version": "17.4.1b",
        "status": "affected"
      },
      {
        "version": "17.4.2a",
        "status": "affected"
      },
      {
        "version": "17.5.1",
        "status": "affected"
      },
      {
        "version": "17.5.1a",
        "status": "affected"
      },
      {
        "version": "17.5.1b",
        "status": "affected"
      },
      {
        "version": "17.5.1c",
        "status": "affected"
      }
    ]
  }
]

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-l2tp-dos-eB5tuFmV

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

EPSS

0.001

Percentile

32.9%

JSON

Related for CVE-2023-20227