CVE-2023-20213

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Nov 1, 2023
Updated: Jan 25, 2024
CWE ID 787

Summary

CVE-2023-20213 is a vulnerability in the CDP processing feature of Cisco ISE that could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to insufficient bounds checking when processing CDP traffic. By sending crafted CDP traffic, an attacker could crash the CDP process, impacting neighbor discovery and the device's ability to determine the reachability of remote devices. To remediate this vulnerability, the CDP process must be manually restarted using the cdp enable command in interface configuration mode. The potential danger this vulnerability poses to an organization includes disruption of network connectivity and loss of visibility into remote devices.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-20213 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options