← CVE Intelligence

CVE-2023-20202

Cisco / Cisco IOS XE Software PUBLISHED

Description (CNA)

A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper memory management. An attacker could exploit this vulnerability by sending a series of network requests to an affected device. A successful exploit could allow the attacker to cause the wncd process to consume available memory and eventually cause the device to reload, resulting in a DoS condition.

Affected (CNA)

Vendor / productVersions
Cisco / Cisco IOS XE Softwareaffected 17.10.1; affected 17.10.1a; affected 17.10.1b; affected 17.9.1; affected 17.9.1w; affected 17.9.2; affected 17.9.1a; affected 17.9.1x; affected 17.9.1y; affected 17.9.2a; affected 17.9.1x1

CWE

CWE-789

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.