CVE-2023-20112
High
Description
A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition.
SeverityHigh
CVSS7.4
Exploit probability—
Product
Cisco Business 150ax Firmware
PublishedMar 23, 2023
First seenMar 23, 2023
Weakness typeCWE-126CWE-126
How to fix
Update
- cisco business_150ax_firmware10.3.2.0 or later
- cisco business_151axm_firmware10.3.2.0 or later
- cisco catalyst_9105ax_firmware10.3.2.0 or later
- cisco catalyst_9105axi_firmware10.3.2.0 or later
- cisco catalyst_9105axw_firmware10.3.2.0 or later
- cisco catalyst_9105i_firmware10.3.2.0 or later
- cisco catalyst_9105w_firmware10.3.2.0 or later
- cisco catalyst_9115_firmware10.3.2.0 or later
- cisco catalyst_9115ax_firmware10.3.2.0 or later
- cisco catalyst_9115axe_firmware10.3.2.0 or later
- cisco catalyst_9115axi_firmware10.3.2.0 or later
- cisco catalyst_9117_firmware10.3.2.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco business_150ax_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco business_151axm_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9105ax_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9105axi_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9105axw_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9105i_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9105w_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9115_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9115ax_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9115axe_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9115axi_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9117_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9117ax_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9117axi_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9120_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9120ax_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9120axe_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9120axi_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9120axp_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9124_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9124ax_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9124axd_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9124axi_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9130_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9130ax_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9130axe_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9130axi_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9136_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9162_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9164_firmware | v < 10.3.2.0 | 10.3.2.0 |
| cisco catalyst_9166_firmware | v < 10.3.2.0 | 10.3.2.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.