Cisco Access Point Software Association Request Denial of Service Vulnerability
CVE-2023-20112

7.4HIGH

Key Information:

Vendor
Cisco
Vendor
CVE Published:
23 March 2023

Badges

๐Ÿ‘พ Exploit Exists

Summary

A vulnerability in the Cisco Access Point software allows unauthenticated adjacent attackers to trigger a denial of service (DoS) condition. This issue arises from inadequate validation of certain parameters within 802.11 association request frames. An attacker can exploit this vulnerability by sending a specially crafted wireless 802.11 association request to the affected device, potentially leading to an unexpected reload and subsequent DoS condition. For more details, refer to the Cisco Security Advisory.

Affected Version(s)

Cisco Aironet Access Point Software

References

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • ๐Ÿ‘พ

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.