CVE-2023-20176
Description
A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service. This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an affected device as a wireless client and sending a high rate of traffic over an extended period of time. A successful exploit could allow the attacker to cause the Datagram TLS (DTLS) session to tear down and reset, causing a denial of service (DoS) condition.
How to fix
- cisco catalyst_9166_firmware17.6.6 or later
- cisco catalyst_9164_firmware17.6.6 or later
- cisco catalyst_9136_firmware17.6.6 or later
- cisco catalyst_9130_firmware17.6.6 or later
- cisco catalyst_9124_firmware17.6.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco catalyst_9166_firmware | v < 17.6.6 | 17.6.6 |
| cisco catalyst_9164_firmware | v < 17.6.6 | 17.6.6 |
| cisco catalyst_9136_firmware | v < 17.6.6 | 17.6.6 |
| cisco catalyst_9130_firmware | v < 17.6.6 | 17.6.6 |
| cisco catalyst_9124_firmware | v < 17.6.6 | 17.6.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.