Cisco Catalyst 9136 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Cisco Catalyst 9136, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.4CVE-2023-20112ciscobusiness_150ax_firmware+31
EPSS score
0.30%
A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition.8.6CVE-2023-20176ciscocatalyst_9124_firmware+6
EPSS score
0.87%
A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service. This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an affected device as a wireless client and sending a high rate of traffic over an extended period of time. A successful exploit could allow the attacker to cause the Datagram TLS (DTLS) session to tear down and reset, causing a denial of service (DoS) condition.