VDB
CVE-2023-20051
CVE-2023-20051
PUBLISHED
CVSS 5.800000190734863 MEDIUM
A vulnerability in the Vector Packet Processor (VPP) of Cisco Packet Data Network Gateway (PGW) could allow an unauthenticated, remote attacker to stop ICMP traffic from being processed over an IPsec connection. This vulnerability is due to the VPP improperly handling a malformed packet. An attacker could exploit this vulnerability by sending a malformed Encapsulating Security Payload (ESP) packet over an IPsec connection. A successful exploit could allow the attacker to stop ICMP traffic over an IPsec connection and cause a denial of service (DoS).
EPSS 0.49% · 65.9th percentile
Risk Scores
CVSS 3.1
5.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
EPSS Score
0.49%
65.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | packet_data_network_gateway | 0 |
| Cisco | Cisco ASR 5000 Series Software | * |
Exploit Intelligence
Timeline
- Apr 5, 2023 CVE Published
- Apr 6, 2023 EPSS Score
- May 14, 2023 EPSS Score
- Jun 21, 2023 EPSS Score
- Jul 29, 2023 EPSS Score
- Sep 5, 2023 EPSS Score
- Oct 13, 2023 EPSS Score
- Nov 20, 2023 EPSS Score
- Dec 28, 2023 EPSS Score
- Feb 3, 2024 EPSS Score
- Mar 12, 2024 EPSS Score
- Apr 19, 2024 EPSS Score