CVE-2023-20051

Medium

Description

A vulnerability in the Vector Packet Processor (VPP) of Cisco Packet Data Network Gateway (PGW) could allow an unauthenticated, remote attacker to stop ICMP traffic from being processed over an IPsec connection. This vulnerability is due to the VPP improperly handling a malformed packet. An attacker could exploit this vulnerability by sending a malformed Encapsulating Security Payload (ESP) packet over an IPsec connection. A successful exploit could allow the attacker to stop ICMP traffic over an IPsec connection and cause a denial of service (DoS).

SeverityMedium

CVSS5.8

Exploit probability59. percentile0.9%

Product

Cisco Packet Data Network Gateway

PublishedApr 5, 2023

First seenApr 5, 2023

Weakness typeCWE-400Uncontrolled resource consumption

How to fix

Update

cisco packet_data_network_gateway21.28.0 or later

Vendor advisories

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-pdng-dos-KmzwEy2Q

Affected products

Product	Affected versions	Fixed in
cisco packet_data_network_gateway	v < 21.28.0	21.28.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.