Input validation error in Cisco Systems, Inc products - CVE-2023-20056

Vulnerability identifier: #VU73971

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-20056

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in the management CLI. A local user can pass specially crafted input to the application and perform a denial of service (DoS) attack.

Cisco Wireless LAN Controller
Integrated Access Point on 1100 Integrated Services Routers
Catalyst 9800 Wireless Controller Software
Catalyst 9100 Access Points
Aironet 3800 Series Access Points
Aironet 2800 Series Access Points
Aironet 1800 Series Access Points
Aironet 1560 Series Access Points
Cisco Aironet 1540 Series Access Points
Catalyst IW6300 Heavy Duty Series Access Points
Aironet 4800 Access Points
6300 Series Embedded Services Access Points

Install updates from vendor's website.

Cisco Wireless LAN Controller - update to 8.10.181.0
Catalyst 9800 Wireless Controller Software - addressed in versions 16.12.8, 17.3.6, 17.6.5, 17.9.2

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-cli-dos-tc2EKEpu

• Denial of service in Cisco Access Point Software