CVE-2023-20202
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2023-20202 is a vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers. It affects multiple products including s5UiTJ, s5UiTI, oiK0xw, qqrBAy, qqrBAz, s5UiTD, s5UiS1, s5UiTE, s5UiS0, s5UiTH, s5UiTG, and s5UiS2. The vulnerability allows an unauthenticated attacker who is adjacent to the network to cause a denial of service (DoS) condition by exploiting improper memory management. The attacker can achieve this by sending a series of network requests to the affected device. This could result in the wncd process consuming excessive memory and ultimately causing the device to reload. The National Vulnerability Database (NVD) rates this vulnerability as medium severity with a base score of 6.5 out of 10. Cisco IOS XE Software users are advised to apply relevant patches or updates provided by Cisco to remediate this vulnerability and mitigate the potential DoS risk it poses.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions