Back to feed
EUVD-2023-24355 · Published Sep 27, 2023
A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service. This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an affected device as a wireless client and sending a high rate of traffic over an extended period of time. A successful exploit could allow the attacker to cause the Datagram TLS (DTLS) session to tear down and reset, causing a denial of service (DoS) condition.
Technologies
Cisco Catalyst 9166 FirmwareCisco Catalyst 9136 FirmwareCisco Catalyst 9130Cisco Catalyst 9166Cisco Catalyst 9124Cisco Catalyst 9164 FirmwareCisco Catalyst 9124 FirmwareCisco Catalyst 9136Cisco Catalyst 9164Cisco Catalyst 9130 Firmware
Weaknesses
CWE-400
CVSS scores
- v3.18.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Impact
References
Potentially impacted assets
See if this affects your attack surface
