CVE-2023-20227

Published Sep 27, 2023 CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Description
A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to improper handling of certain L2TP packets. An attacker could exploit this vulnerability by sending crafted L2TP packets to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.

Note: Only traffic directed to the affected system can be used to exploit this vulnerability.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-24406 A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain L2TP packets. An attacker could exploit this vulnerability by sending crafted L2TP packets to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. Note: Only traffic directed to the affected system can be used to exploit this vulnerability.
History

No history.

Subscriptions

Cisco 1000 Integrated Services Router 1100-4g Integrated Services Router 1100-4gltegb Integrated Services Router 1100-4gltena Integrated Services Router 1100-6g Integrated Services Router 4221 Integrated Services Router 4321\/k9-rf Integrated Services Router 4321\/k9-ws Integrated Services Router 4321\/k9 Integrated Services Router 4321 Integrated Services Router 4331\/k9-rf Integrated Services Router 4331\/k9-ws Integrated Services Router 4331\/k9 Integrated Services Router 4331 Integrated Services Router 4351\/k9-rf Integrated Services Router 4351\/k9-ws Integrated Services Router 4351\/k9 Integrated Services Router 4351 Integrated Services Router 4431 Integrated Services Router 4451 Integrated Services Router 4461 Integrated Services Router C8200-1n-4t C8200l-1n-4t C8500l-8s4x Catalyst 8000v Edge Catalyst 8300-1n1s-4t2x Catalyst 8300-1n1s-6t Catalyst 8300-2n2s-4t2x Catalyst 8300-2n2s-6t Cloud Services Router 1000v Ios Xe Vg400-2fxs\/2fxo Vg400-4fxs\/4fxo Vg400-6fxs\/6fxo Vg400-8fxs Vg420-132fxs\/6fxo Vg420-144fxs Vg420-84fxs\/6fxo Vg450-144fxs\/k9 Vg450-72fxs\/k9 Vg450\/k9
Weaknesses

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Aug 2, 2024, 9:05 AM
Reserved
Oct 27, 2022, 6:47 PM
Status
Modified
Published
Sep 27, 2023, 6:15 PM
Modified
Jun 17, 2026, 5:29 AM