high7.4
CVE-2023-20112
A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affect…
Impact
A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Business 150ax Firmware | before 10.3.2.0 |
| Cisco | Business 151axm Firmware | before 10.3.2.0 |
| Cisco | Catalyst 9105ax Firmware | before 10.3.2.0 |
| Cisco | Catalyst 9105axi Firmware | before 10.3.2.0 |
| Cisco | Catalyst 9105axw Firmware | before 10.3.2.0 |
| Cisco | Catalyst 9105i Firmware | before 10.3.2.0 |
| Cisco | Catalyst 9105w Firmware | before 10.3.2.0 |
| Cisco | Catalyst 9115 Firmware | before 10.3.2.0 |
| Cisco | Catalyst 9115ax Firmware | before 10.3.2.0 |
| Cisco | Catalyst 9115axe Firmware | before 10.3.2.0 |
| Cisco | Catalyst 9115axi Firmware | before 10.3.2.0 |
| Cisco | Catalyst 9117 Firmware | before 10.3.2.0 |