1. Home
  2. CVE Database
  3. CVE-2023-20056
MEDIUM · 6.5

CVE-2023-20056

A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This vulnerab...

Vulnerability Description

A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to cause an affected device to reload spontaneously, resulting in a DoS condition.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
CiscoWireless Lan Controller Software< 8.10.183.0
CiscoEsw6300-
CiscoAironet Access Point Software< 17.9.0.135
CiscoAironet 1540-
CiscoAironet 1542D-
CiscoAironet 1542I-
CiscoAironet 1560-
CiscoAironet 1562D-
CiscoAironet 1562E-
CiscoAironet 1562I-
CiscoAironet 1800-
CiscoAironet 1800I-
CiscoAironet 1810-
CiscoAironet 1810W-
CiscoAironet 1815-
CiscoAironet 1815I-
CiscoAironet 1815M-
CiscoAironet 1815T-
CiscoAironet 1815W-
CiscoAironet 2800-

Related Weaknesses (CWE)

CWE-78

References

FAQ

What is CVE-2023-20056?

CVE-2023-20056 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This vulnerab...

How severe is CVE-2023-20056?

CVE-2023-20056 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-20056?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Wireless Lan Controller Software, Cisco Esw6300, Cisco Aironet Access Point Software, Cisco Aironet 1540, Cisco Aironet 1542D.