Skip to content
OpenAdvisories
Medium WID-SEC-2023-0722 2 CVEs

Cisco IOS XE: Mehrere Schwachstellen ermöglichen Denial of Service

Published Mar 22, 2023 · Updated Mar 22, 2023 · de-DE

Vendor: Cisco Product: IOS XE for Wireless LAN Controllers

Summary

Ein Angreifer kann mehrere Schwachstellen in Cisco IOS XE ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das für Cisco Geräte wie z. B. Router und Switches eingesetzt wird.

Vulnerabilities 2

  • High 7.4
    CVE-2023-20067

    Cisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling Denial of Service Vulnerability

    A vulnerability in the HTTP-based client profiling feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is…

    Cisco Cisco IOS XE Software iOS Network devices
  • Medium 6.8
    CVE-2023-20100

    Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability

    A vulnerability in the access point (AP) joining process of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to cause a denial…

    Cisco Cisco IOS XE Software iOS Network devices

Revision history

  1. #1

    Initiale Fassung

References