Skip to content
OpenAdvisories
Medium WID-SEC-2023-0733 3 CVEs

Cisco Wireless LAN Controllers: Mehrere Schwachstellen

Published Mar 22, 2023 · Updated Mar 22, 2023 · de-DE

Vendor: Cisco Product: IOS XE Product: IOS XE for Wireless LAN Controllers < 16.12.8 Product: IOS XE for Wireless LAN Controllers < 17.3.5 Product: IOS XE for Wireless LAN Controllers < 17.3.6 Product: IOS XE for Wireless LAN Controllers < 17.6.3 Product: IOS XE for Wireless LAN Controllers < 17.6.5 Product: IOS XE for Wireless LAN Controllers < 17.9.2 Product: Wireless LAN Controllers Product: Wireless LAN Controllers < 8.10.171.0 Product: Wireless LAN Controllers < 8.10.183.0

Summary

Ein Angreifer kann mehrere Schwachstellen in Cisco Wireless LAN Controllers und Cisco IOS XE ausnutzen, um einen Denial of Service Angriff durchzuführen und beliebigen Code auszuführen.

Product

Die Cisco Wireless LAN Controller (WLC) sind Teil der CISCO Produkt Familie um Cisco Systeme um Wireless LAN zu erweitern.
Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das für Cisco Geräte wie z. B. Router und Switches eingesetzt wird.

Vulnerabilities 3

  • High 7.4
    CVE-2023-20112

    Cisco Access Point Software Association Request Denial of Service Vulnerability

    A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 …

    Cisco Cisco Aironet Access Point Software Network devices
  • Medium 6.5
    CVE-2023-20056

    Cisco Access Point Software Denial of Service Vulnerability

    A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of commands s…

    Cisco Cisco Aironet Access Point Software Network devices
  • Medium 4.6
    CVE-2023-20097

    Cisco Access Point Software Command Injection Vulnerability

    A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This vulnerability is due to improper input validation of commands that are issued from a wir…

    Cisco Cisco Aironet Access Point Software Network devices

Revision history

  1. #1

    Initiale Fassung

References