How severe is CVE-2023-20268?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 4.7 out of 10.

What type of vulnerability is CVE-2023-20268?

This is classified as CWE-400, which is a common weakness in software security.

CVE-2023-20268 - MEDIUM Severity | CVSS 4.7

Vulnerability Description

A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device.  This vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic.

Related Vulnerabilities

CVE-2015-3248

MEDIUM

CVSS:4.7(Medium)

openhpi/Makefile.am in OpenHPI before 3.6.0 uses world-writable permissions for /var/lib/openhpi directory, which allows local users, when quotas are not properly setup, to fill the filesystem hosting...

CWE-4002015

CVE-2016-6213

MEDIUM

CVSS:4.7(Medium)

fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which allows local users to cause a denial of service (memory consumption and deadlock) ...

CWE-4002016

CVE-2021-47284

MEDIUM

CVSS:4.7(Medium)

In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: netjet: Fix crash in nj_probe: 'nj_setup' in netjet.c might fail with -EIO and in this case 'card->irq' is initialized ...

CWE-4002021

CVE-2020-4956

MEDIUM

CVSS:4.8(Medium)

IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped to a file. By setting a grossly large cac...

CWE-4002020

CVE-2023-1654

MEDIUM

CVSS:4.8(Medium)

Denial of Service in GitHub repository gpac/gpac prior to 2.4.0.

CWE-4002023

CVE-2023-7258

MEDIUM

CVSS:4.8(Medium)

A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, making it possible for an attacker running as root and with permissio...

CWE-4002023