Description
A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service.
This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an affected device as a wireless client and sending a high rate of traffic over an extended period of time. A successful exploit could allow the attacker to cause the Datagram TLS (DTLS) session to tear down and reset, causing a denial of service (DoS) condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cisco | Cisco Aironet Access Point Software | 8.10.170.0 | — |
| Cisco | Cisco Aironet Access Point Software (IOS XE Controller) | 16.10.1e, 16.10.1, 17.1.1t, 17.1.1s, 17.1.1, 16.11.1a, 16.11.1, 16.11.1c, 16.11.1b, 16.12.1s, 16.12.4, 16.12.1, 16.12.2s, 16.12.1t, 16.12.4a, 16.12.5, 16.12.3, 16.12.6, 16.12.8, 16.12.7, 16.12.6a, 17.3.1, 17.3.2a, 17.3.3, 17.3.2, 17.3.4c, 17.3.5a, 17.3.6, 17.2.1, 17.2.1a, 17.2.3, 17.2.2, 17.5.1, 17… | — |
Advisories 1
- WID-SEC-2023-2493 Cisco Catalyst: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Sep 27, 2023