Vulnerability Description
A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to the mishandling of a crafted packet stream through the AppQoE or UTD application. An attacker could exploit this vulnerability by sending a crafted packet stream through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios Xe | 17.7.1 |
| Cisco | Catalyst 8000V Edge | - |
| Cisco | 1100-4G Integrated Services Router | - |
| Cisco | 1100-4Gltegb Integrated Services Router | - |
| Cisco | 1100-4Gltena Integrated Services Router | - |
| Cisco | 1100-6G Integrated Services Router | - |
| Cisco | 4221 Integrated Services Router | - |
| Cisco | 4321\/K9-Rf Integrated Services Router | - |
| Cisco | 4321\/K9-Ws Integrated Services Router | - |
| Cisco | 4321\/K9 Integrated Services Router | - |
| Cisco | 4321 Integrated Services Router | - |
| Cisco | 4331\/K9-Rf Integrated Services Router | - |
| Cisco | 4331\/K9-Ws Integrated Services Router | - |
| Cisco | 4331\/K9 Integrated Services Router | - |
| Cisco | 4331 Integrated Services Router | - |
| Cisco | 4351\/K9-Rf Integrated Services Router | - |
| Cisco | 4351\/K9-Ws Integrated Services Router | - |
| Cisco | 4351\/K9 Integrated Services Router | - |
| Cisco | 4351 Integrated Services Router | - |
| Cisco | 4431 Integrated Services Router | - |
Related Weaknesses (CWE)
References
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ciVendor Advisory
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ciVendor Advisory
FAQ
What is CVE-2023-20226?
CVE-2023-20226 is a vulnerability with a CVSS score of 8.6 (HIGH). A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to r...
How severe is CVE-2023-20226?
CVE-2023-20226 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-20226?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ios Xe, Cisco Catalyst 8000V Edge, Cisco 1100-4G Integrated Services Router, Cisco 1100-4Gltegb Integrated Services Router, Cisco 1100-4Gltena Integrated Services Router.