What is CVE-2023-20081?

CVE-2023-20081 is a medium-severity vulnerability in Cisco Ios, classified under Heap-based Buffer Overflow. CVSS score: 6.8/10. Published 2023-03-23.

How severe is CVE-2023-20081?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Buffer overflow in Cisco Ios

CVE-2023-20081

A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remot…

Vulnerability class: Buffer Overflow

EPSS: 0.003 (55.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H.

Affected products

Cisco Ios — versions n/a

Weakness classification (CWE)

CWE-122 — Heap-based Buffer Overflow

References

20230322 Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability (vendor-advisory)

Frequently asked questions

What is CVE-2023-20081?: CVE-2023-20081 is a medium-severity vulnerability in Cisco Ios, classified under Heap-based Buffer Overflow. CVSS score: 6.8/10. Published 2023-03-23.
How severe is CVE-2023-20081?: Medium severity. CVSS v3 base score is 6.8 out of 10.