Denial of Service Vulnerability in Cisco Identity Services Engine
CVE-2023-20213

4.3MEDIUM

Key Information:

Vendor

Cisco
Status
Cisco Identity Services Engine Software
Vendor
CVE Published:
1 November 2023

Badges

👾 Exploit Exists

What is CVE-2023-20213?

A vulnerability exists in the CDP processing feature of Cisco Identity Services Engine (ISE), allowing an unauthenticated, adjacent attacker to trigger a denial of service condition. This arises from inadequate bounds checking during the handling of CDP traffic. By sending specially crafted CDP packets, an attacker can crash the CDP process, hampering neighbor discovery and the device’s capability to assess the reachability of connected devices. Following an exploit, the CDP process requires manual intervention to restart, using the 'cdp enable' command in interface configuration mode.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Cisco Identity Services Engine Software 2.6.0

Cisco Identity Services Engine Software 2.6.0 p1

Cisco Identity Services Engine Software 2.6.0 p2

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

JSON
.