CVSS 3.1 Score 6.5 of 10 (medium)


Published Sep 27, 2023
Updated: Jan 25, 2024
CWE ID 789


CVE-2023-20202 is a vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers. It affects multiple products including s5UiTJ, s5UiTI, oiK0xw, qqrBAy, qqrBAz, s5UiTD, s5UiS1, s5UiTE, s5UiS0, s5UiTH, s5UiTG, and s5UiS2. The vulnerability allows an unauthenticated attacker who is adjacent to the network to cause a denial of service (DoS) condition by exploiting improper memory management. The attacker can achieve this by sending a series of network requests to the affected device. This could result in the wncd process consuming excessive memory and ultimately causing the device to reload. The National Vulnerability Database (NVD) rates this vulnerability as medium severity with a base score of 6.5 out of 10. Cisco IOS XE Software users are advised to apply relevant patches or updates provided by Cisco to remediate this vulnerability and mitigate the potential DoS risk it poses.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-20202 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options