CVE-2023-20112
Cisco Access Point Software Association Request Denial of Service Vulnerability
A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Cisco Access Point Software Association Request Denial of Service Vulnerability
A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition.
- Record
CVE-2023-20112- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H - Weakness
- CWE-126
- Updated
- 2026-11-02
EUVDEUVD-2023-24291
A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition.
- Record
EUVD-2023-24291- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4xqr-rhvf-w2gg
A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent...
A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition.
- Record
GHSA-4xqr-rhvf-w2gg- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
NVD
A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition.
- Record
CVE-2023-20112- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H - CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-126, CWE-125
- Updated
- 2026-11-02
Affected products
- cisco business 150ax firmware
- cisco business 151axm firmware
- cisco catalyst 9105ax firmware
- cisco catalyst 9105axi firmware
- cisco catalyst 9105axw firmware
- cisco catalyst 9105i firmware
- cisco catalyst 9105w firmware
- cisco catalyst 9115 firmware
- cisco catalyst 9115ax firmware
- cisco catalyst 9115axe firmware
- cisco catalyst 9115axi firmware
- cisco catalyst 9117 firmware
Show 20 moreShow less
- cisco catalyst 9117ax firmware
- cisco catalyst 9117axi firmware
- cisco catalyst 9120 firmware
- cisco catalyst 9120ax firmware
- cisco catalyst 9120axe firmware
- cisco catalyst 9120axi firmware
- cisco catalyst 9120axp firmware
- cisco catalyst 9124 firmware
- cisco catalyst 9124ax firmware
- cisco catalyst 9124axd firmware
- cisco catalyst 9124axi firmware
- cisco catalyst 9130 firmware
- cisco catalyst 9130ax firmware
- cisco catalyst 9130axe firmware
- cisco catalyst 9130axi firmware
- cisco catalyst 9136 firmware
- cisco catalyst 9162 firmware
- cisco catalyst 9164 firmware
- cisco catalyst 9166 firmware
- cisco aironet access point software
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-20112 is a high vulnerability (CVSS 7.4) in Cisco Business 150ax Firmware, published March 23, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 23rd percentile. No source names a fixed version.