Buffer overflow in Cisco 1100-4g_integrated_services_router
CVE-2023-20081
A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remot…
Vulnerability class: Buffer Overflow
EPSS: 0.007 (48.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H.
Affected products
- Cisco 1100-4g_integrated_services_router
- Cisco 1100-4p_integrated_services_router
- Cisco 1100-6g_integrated_services_router
- Cisco 1100-8p_integrated_services_router
- Cisco 1101-4p_integrated_services_router
- Cisco 1101_integrated_services_router
- Cisco 1109-2p_integrated_services_router
- Cisco 1109-4p_integrated_services_router
- Cisco 1109_integrated_services_router
- Cisco 1111x-8p_integrated_services_router
Weakness classification (CWE)
References
- psirt@cisco.com (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2023-20081?
- CVE-2023-20081 is a medium-severity vulnerability in Cisco 1100-4g_integrated_services_router, classified under Heap-based Buffer Overflow. CVSS score: 6.8/10. Published 2023-03-23.
- How severe is CVE-2023-20081?
- Medium severity. CVSS v3 base score is 6.8 out of 10.