VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Sep 27, 2023· Updated Jun 17, 2026

CVE-2023-20202

CVE-2023-20202

Description

A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper memory management. An attacker could exploit this vulnerability by sending a series of network requests to an affected device. A successful exploit could allow the attacker to cause the wncd process to consume available memory and eventually cause the device to reload, resulting in a DoS condition.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14
  • Cisco Systems, Inc./IOS XE Software for Wireless LAN Controllersllm-create
  • Cisco Systems, Inc./IOS XE Software for Cisco Merakicpe-rescue
    Range: 17.10.1
  • Cisco Systems, Inc./iOS Xe12 versions
    cpe:2.3:o:cisco:ios_xe:17.9.1:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:o:cisco:ios_xe:17.9.1:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:17.9.1a:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:17.9.1w:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:17.9.1x:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:17.9.1x1:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:17.9.1y:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:17.9.2:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:17.9.2a:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:17.9.2b:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:17.10.1:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:17.10.1a:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:17.10.1b:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.