vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-20176

HIGH
8.6
CVSS Score
Published: September 27, 2023 at 05:25 PM UTC
Updated: June 17, 2026 at 05:29 AM UTC
11 products affected across 1 vendorCatalyst 9124 FirmwareCatalyst 9130 FirmwareCatalyst 9166 Firmware

Using Cisco Aironet Access Point Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Aironet Access Point Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.6
Exploit prediction
EPSS 0.9%

Description

A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service. This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an affected device as a wireless client and sending a high rate of traffic over an extended period of time. A successful exploit could allow the attacker to cause the Datagram TLS (DTLS) session to tear down and reset, causing a denial of service (DoS) condition.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Catalyst 9124 Firmware· Cisco
95%
v < 17.6.6
Affected range stops below 17.6.6, so it looks safe — our inference, not a vendor statement
cisco-catalyst-9124 (same device)
Catalyst 9130 Firmware· Cisco
95%
v < 17.6.6
Affected range stops below 17.6.6, so it looks safe — our inference, not a vendor statement
cisco-catalyst-9130 (same device)
Catalyst 9136 Firmware· Cisco
95%
v < 17.6.6
Affected range stops below 17.6.6, so it looks safe — our inference, not a vendor statement
cisco-catalyst-9136 (same device)
Catalyst 9164 Firmware· Cisco
95%
v < 17.6.6
Affected range stops below 17.6.6, so it looks safe — our inference, not a vendor statement
cisco-catalyst-9164 (same device)
Catalyst 9166 Firmware· Cisco
95%
v < 17.6.6
Affected range stops below 17.6.6, so it looks safe — our inference, not a vendor statement
cisco-catalyst-9166 (same device)
Aironet Access Point· Cisco
60%
16.10.116.10.1e16.11.116.11.1a16.11.1b16.11.1c16.12.116.12.1s16.12.1t16.12.2s16.12.316.12.416.12.4a16.12.516.12.616.12.6a16.12.716.12.817.1.117.1.1s17.1.1t17.2.117.2.1a17.2.217.2.317.3.117.3.217.3.2a17.3.317.3.4c17.3.5a17.3.617.4.117.4.217.5.117.6.117.6.217.6.317.6.417.6.517.7.117.8.18.10.170.0
Catalyst 9124· Ciscodevice
80%
All versions
Catalyst 9130· Ciscodevice
80%
All versions
Catalyst 9136· Ciscodevice
80%
All versions
Catalyst 9164· Ciscodevice
80%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

Vendor Advisory
Source: [email protected]
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-click-ap-dos-wdcXkvnQ

CVSS

8.6HIGH[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-400

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card