Unknown
CVE-2023-20067
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
Unknown
(0 users assessed)
Unknown
(0 users assessed)CVE-2023-20067
MITRE ATT&CK
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Topic Tags
Description
A vulnerability in the HTTP-based client profiling feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of received traffic. An attacker could exploit this vulnerability by sending crafted traffic through a wireless access point. A successful exploit could allow the attacker to cause CPU utilization to increase, which could result in a DoS condition on an affected device and could cause new wireless client associations to fail. Once the offending traffic stops, the affected system will return to an operational state and new client associations will succeed.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
General Information
Vendors
- cisco
Products
- ios xe 16.10.1,
- ios xe 16.10.1e,
- ios xe 16.10.1s,
- ios xe 16.11.1,
- ios xe 16.11.1a,
- ios xe 16.11.1b,
- ios xe 16.11.1c,
- ios xe 16.11.2,
- ios xe 16.12.1,
- ios xe 16.12.1s,
- ios xe 16.12.1t,
- ios xe 16.12.2s,
- ios xe 16.12.2t,
- ios xe 16.12.3,
- ios xe 16.12.3s,
- ios xe 16.12.4,
- ios xe 16.12.4a,
- ios xe 16.12.5,
- ios xe 16.12.6,
- ios xe 16.12.6a,
- ios xe 16.12.7,
- ios xe 16.12.8,
- ios xe 17.1.1,
- ios xe 17.1.1s,
- ios xe 17.1.1t,
- ios xe 17.1.2,
- ios xe 17.1.3,
- ios xe 17.2.1,
- ios xe 17.2.1a,
- ios xe 17.3.1,
- ios xe 17.3.2,
- ios xe 17.3.2a,
- ios xe 17.3.3,
- ios xe 17.3.4,
- ios xe 17.3.4c,
- ios xe 17.3.5,
- ios xe 17.3.5a,
- ios xe 17.3.5b,
- ios xe 17.3.6,
- ios xe 17.4.1,
- ios xe 17.5.1,
- ios xe 17.6.1,
- ios xe 17.6.2,
- ios xe 17.6.3,
- ios xe 17.6.4,
- ios xe 17.7.1,
- ios xe 17.8.1,
- ios xe 17.9.1
References
Additional Info
Technical Analysis
Report as Emergent Threat Response
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
