How severe is CVE-2023-20112?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 6.5 out of 10.

What type of vulnerability is CVE-2023-20112?

This is classified as CWE-126, which is a common weakness in software security.

CVE-2023-20112 - MEDIUM Severity | CVSS 6.5

Vulnerability Description

A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition.

Related Vulnerabilities

CVE-2020-8244

MEDIUM

CVSS:6.5(Medium)

A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even typed) that if it ends up in consume() argument and can become...

CWE-1262020

CVE-2022-32141

MEDIUM

CVSS:6.5(Medium)

Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a den...

CWE-1262022