CVE-2023-20109

Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

Medium 6.6
Exploited: added to CISA KEV 10 Oct 2023

Description

A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affected device or cause the device to crash. This vulnerability is due to insufficient validation of attributes in the Group Domain of Interpretation (GDOI) and G-IKEv2 protocols of the GET VPN feature. An attacker could exploit this vulnerability by either compromising an installed key server or modifying the configuration of a group member to point to a key server that is controlled by the attacker. A successful exploit could allow the attacker to execute arbitrary code and gain full control of the affected system or cause the affected system to reload, resulting in a denial of service (DoS) condition. For more information, see the Details ["#details"] section of this advisory.

Key facts

Published: 27 Sep 2023
Last changed: 21 Oct 2025
Assigned by: cisco
KEV added: 10 Oct 2023
KEV fix due: 31 Oct 2023
EPSS: 2.504% likely to be exploited in the next 30 days, higher than 84.994% of CVEs (scores for 15 Nov 2026)
SSVC (CISA): Exploitation: active; Automatable: no; Technical impact: total

Severity scores

Each score is shown as its source gave it. They are not averaged or merged.

6.6CVSS 3.1, Mediumfrom the CNA (cisco)CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

What to do

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.CISA KEV required action

Historical context and remediation

This reference retains the original CVE publication date. A recent record update does not mean a new attack occurred.

No separately sourced impact summary is available on this page yet. Consult the description, version data and dated exploitation evidence.

Version statuses below come from the CNA. An “unaffected” version is not necessarily a currently supported release or proof of a patch date. EPSS is a dated risk estimate, not a count of historical attacks.

Read the original CVE record.

Affected products

Vendor	Product	Versions
Cisco	IOS	12.4(24)T (affected) 12.4(24)T3 (affected) 12.4(22)T1 (affected) 12.4(24)T5 (affected) 12.4(24)T4 (affected) 12.4(22)T (affected) 12.4(24)T8 (affected) 12.4(24)T2 (affected) 12.4(22)T5 (affected) 12.4(22)T4 (affected) 12.4(24)T1 (affected) 12.4(24)T7 (affected) 12.4(22)T3 (affected) 12.4(24)T6 (affected) 12.4(22)T2 (affected) 12.4(24)T4a (affected) 12.4(24)T4b (affected) 12.4(24)T3e (affected) 12.4(24)T4c (affected) 12.4(24)T4d (affected) 12.4(24)T4e (affected) 12.4(24)T3f (affected) 12.4(24)T4f (affected) 12.4(24)T4l (affected) 12.4(24)MD1 (affected) 12.4(24)MD (affected) 12.4(24)MD3 (affected) 12.4(24)MD2 (affected) 12.4(22)MD1 (affected) 12.4(22)MD2 (affected) 12.4(24)MD5 (affected) 12.4(22)MD (affected) 12.4(24)MD4 (affected) 12.4(24)MD6 (affected) 12.4(24)MD7 (affected) 12.4(22)XR5 (affected) 12.4(22)XR4 (affected) 12.4(22)XR7 (affected) 12.4(22)XR2 (affected) 12.4(22)XR6 (affected) 12.4(22)XR10 (affected) 12.4(22)XR1 (affected) 12.4(22)XR9 (affected) 12.4(22)XR3 (affected) 12.4(22)XR8 (affected) 12.4(22)XR11 (affected) 12.4(22)XR12 (affected) 12.4(22)MDA3 (affected) 12.4(24)MDA5 (affected) 12.4(22)MDA5 (affected) 12.4(24)MDA3 (affected) 12.4(22)MDA4 (affected) 12.4(24)MDA4 (affected) 12.4(24)MDA1 (affected) 12.4(22)MDA (affected) 12.4(22)MDA2 (affected) 12.4(22)MDA1 (affected) 12.4(24)MDA2 (affected) 12.4(22)MDA6 (affected) 12.4(24)MDA6 (affected) 12.4(24)MDA7 (affected) 12.4(24)MDA8 (affected) 12.4(24)MDA10 (affected) 12.4(24)MDA9 (affected) 12.4(24)MDA11 (affected) 12.4(24)MDA12 (affected) 12.4(24)MDA13 (affected) 12.4(24)YG3 (affected) 12.4(24)YG4 (affected) 12.4(24)YG1 (affected) 12.4(24)YG2 (affected) 12.4(24)YG (affected) 15.0(1)M1 (affected) 15.0(1)M5 (affected) 15.0(1)M4 (affected) 15.0(1)M3 (affected) 15.0(1)M2 (affected) 15.0(1)M6 (affected) 15.0(1)M (affected) 15.0(1)M7 (affected) 15.0(1)M10 (affected) 15.0(1)M9 (affected) 15.0(1)M8 (affected) 15.0(1)XA2 (affected) 15.0(1)XA4 (affected) 15.0(1)XA1 (affected) 15.0(1)XA3 (affected) 15.0(1)XA (affected) 15.0(1)XA5 (affected) 15.1(2)T (affected) 15.1(1)T4 (affected) 15.1(3)T2 (affected) 15.1(1)T1 (affected) 15.1(2)T0a (affected) 15.1(3)T3 (affected) 15.1(1)T3 (affected) 15.1(2)T3 (affected) 15.1(2)T4 (affected) 15.1(1)T2 (affected) 15.1(3)T (affected) 15.1(2)T2a (affected) 15.1(3)T1 (affected) 15.1(1)T (affected) 15.1(2)T2 (affected) 15.1(2)T1 (affected) 15.1(2)T5 (affected) 15.1(3)T4 (affected) 15.1(1)T5 (affected) 15.1(1)XB (affected) 15.0(1)S2 (affected) 15.0(1)S1 (affected) 15.0(1)S (affected) 15.0(1)S3a (affected) 15.0(1)S4 (affected) 15.0(1)S5 (affected) 15.0(1)S4a (affected) 15.0(1)S6 (affected) 15.2(1)S (affected) 15.2(2)S (affected) 15.2(1)S1 (affected) 15.2(4)S (affected) 15.2(1)S2 (affected) 15.2(2)S1 (affected) 15.2(2)S2 (affected) 15.2(2)S0a (affected) 15.2(2)S0c (affected) 15.2(4)S1 (affected) 15.2(4)S4 (affected) 15.2(4)S6 (affected) 15.2(4)S2 (affected) 15.2(4)S5 (affected) 15.2(4)S3 (affected) 15.2(4)S3a (affected) 15.2(4)S4a (affected) 15.2(4)S7 (affected) 15.3(1)T (affected) 15.3(2)T (affected) 15.3(1)T1 (affected) 15.3(1)T2 (affected) 15.3(1)T3 (affected) 15.3(1)T4 (affected) 15.3(2)T1 (affected) 15.3(2)T2 (affected) 15.3(2)T3 (affected) 15.3(2)T4 (affected) 15.0(2)EY (affected) 15.0(2)EY1 (affected) 15.0(2)EY2 (affected) 15.0(2)EY3 (affected) 15.1(2)S (affected) 15.1(1)S (affected) 15.1(1)S1 (affected) 15.1(3)S (affected) 15.1(1)S2 (affected) 15.1(2)S1 (affected) 15.1(2)S2 (affected) 15.1(3)S1 (affected) 15.1(3)S0a (affected) 15.1(3)S2 (affected) 15.1(3)S4 (affected) 15.1(3)S3 (affected) 15.1(3)S5 (affected) 15.1(3)S6 (affected) 15.1(3)S5a (affected) 15.1(4)M3 (affected) 15.1(4)M (affected) 15.1(4)M1 (affected) 15.1(4)M2 (affected) 15.1(4)M6 (affected) 15.1(4)M5 (affected) 15.1(4)M4 (affected) 15.1(4)M7 (affected) 15.1(4)M3a (affected) 15.1(4)M10 (affected) 15.1(4)M8 (affected) 15.1(4)M9 (affected) 15.0(2)SE (affected) 15.0(2)SE1 (affected) 15.0(2)SE2 (affected) 15.0(2)SE3 (affected) 15.0(2)SE4 (affected) 15.0(2)SE5 (affected) 15.0(2)SE6 (affected) 15.0(2)SE7 (affected) 15.0(2)SE8 (affected) 15.0(2)SE9 (affected) 15.0(2)SE10 (affected) 15.0(2)SE11 (affected) 15.0(2)SE10a (affected) 15.0(2)SE12 (affected) 15.0(2)SE13 (affected) 15.1(2)GC (affected) 15.1(2)GC1 (affected) 15.1(2)GC2 (affected) 15.1(4)GC (affected) 15.1(4)GC1 (affected) 15.1(4)GC2 (affected) 15.1(1)SG (affected) 15.1(2)SG (affected) 15.1(1)SG1 (affected) 15.1(1)SG2 (affected) 15.1(2)SG1 (affected) 15.1(2)SG2 (affected) 15.1(2)SG3 (affected) 15.1(2)SG4 (affected) 15.1(2)SG5 (affected) 15.1(2)SG6 (affected) 15.1(2)SG7 (affected) 15.1(2)SG8 (affected) 15.0(1)MR (affected) 15.0(2)MR (affected) 15.2(4)M (affected) 15.2(4)M1 (affected) 15.2(4)M2 (affected) 15.2(4)M4 (affected) 15.2(4)M3 (affected) 15.2(4)M5 (affected) 15.2(4)M8 (affected) 15.2(4)M10 (affected) 15.2(4)M7 (affected) 15.2(4)M6 (affected) 15.2(4)M9 (affected) 15.2(4)M6a (affected) 15.2(4)M11 (affected) 12.4(24)MDB (affected) 12.4(24)MDB1 (affected) 12.4(24)MDB3 (affected) 12.4(24)MDB4 (affected) 12.4(24)MDB5 (affected) 12.4(24)MDB6 (affected) 12.4(24)MDB7 (affected) 12.4(24)MDB5a (affected) 12.4(24)MDB8 (affected) 12.4(24)MDB9 (affected) 12.4(24)MDB10 (affected) 12.4(24)MDB11 (affected) 12.4(24)MDB12 (affected) 12.4(24)MDB13 (affected) 12.4(24)MDB14 (affected) 12.4(24)MDB15 (affected) 12.4(24)MDB16 (affected) 12.4(24)MDB17 (affected) 12.4(24)MDB18 (affected) 12.4(24)MDB19 (affected) 15.0(2)EX (affected) 15.0(2)EX1 (affected) 15.0(2)EX2 (affected) 15.0(2)EX3 (affected) 15.0(2)EX4 (affected) 15.0(2)EX5 (affected) 15.0(2)EX8 (affected) 15.0(2a)EX5 (affected) 15.0(2)EX10 (affected) 15.0(2)EX11 (affected) 15.0(2)EX13 (affected) 15.0(2)EX12 (affected) 15.2(1)GC (affected) 15.2(1)GC1 (affected) 15.2(1)GC2 (affected) 15.2(2)GC (affected) 15.2(3)GC (affected) 15.2(3)GC1 (affected) 15.2(4)GC (affected) 15.2(4)GC1 (affected) 15.2(4)GC2 (affected) 15.2(4)GC3 (affected) 15.1(1)SY (affected) 15.1(1)SY1 (affected) 15.1(2)SY (affected) 15.1(2)SY1 (affected) 15.1(2)SY2 (affected) 15.1(1)SY2 (affected) 15.1(1)SY3 (affected) 15.1(2)SY3 (affected) 15.1(1)SY4 (affected) 15.1(2)SY4 (affected) 15.1(1)SY5 (affected) 15.1(2)SY5 (affected) 15.1(2)SY4a (affected) 15.1(1)SY6 (affected) 15.1(2)SY6 (affected) 15.1(2)SY7 (affected) 15.1(2)SY8 (affected) 15.1(2)SY9 (affected) 15.1(2)SY10 (affected) 15.1(2)SY11 (affected) 15.1(2)SY12 (affected) 15.1(2)SY13 (affected) 15.1(2)SY14 (affected) 15.1(2)SY15 (affected) 15.1(2)SY16 (affected) 15.3(1)S (affected) 15.3(2)S (affected) 15.3(3)S (affected) 15.3(1)S2 (affected) 15.3(1)S1 (affected) 15.3(2)S2 (affected) 15.3(2)S1 (affected) 15.3(3)S1 (affected) 15.3(3)S2 (affected) 15.3(3)S3 (affected) 15.3(3)S6 (affected) 15.3(3)S4 (affected) 15.3(3)S1a (affected) 15.3(3)S5 (affected) 15.3(3)S7 (affected) 15.3(3)S8 (affected) 15.3(3)S9 (affected) 15.3(3)S10 (affected) 15.3(3)S8a (affected) 15.4(1)T (affected) 15.4(2)T (affected) 15.4(1)T2 (affected) 15.4(1)T1 (affected) 15.4(1)T3 (affected) 15.4(2)T1 (affected) 15.4(2)T3 (affected) 15.4(2)T2 (affected) 15.4(1)T4 (affected) 15.4(2)T4 (affected) 15.0(2)EA (affected) 15.0(2)EA1 (affected) 15.2(1)E (affected) 15.2(2)E (affected) 15.2(1)E1 (affected) 15.2(3)E (affected) 15.2(1)E2 (affected) 15.2(1)E3 (affected) 15.2(2)E1 (affected) 15.2(4)E (affected) 15.2(3)E1 (affected) 15.2(2)E2 (affected) 15.2(2a)E1 (affected) 15.2(2)E3 (affected) 15.2(2a)E2 (affected) 15.2(3)E2 (affected) 15.2(3a)E (affected) 15.2(3)E3 (affected) 15.2(4)E1 (affected) 15.2(2)E4 (affected) 15.2(2)E5 (affected) 15.2(4)E2 (affected) 15.2(3)E4 (affected) 15.2(5)E (affected) 15.2(4)E3 (affected) 15.2(2)E6 (affected) 15.2(5a)E (affected) 15.2(5)E1 (affected) 15.2(5b)E (affected) 15.2(2)E5a (affected) 15.2(5c)E (affected) 15.2(3)E5 (affected) 15.2(2)E5b (affected) 15.2(5a)E1 (affected) 15.2(4)E4 (affected) 15.2(2)E7 (affected) 15.2(5)E2 (affected) 15.2(6)E (affected) 15.2(5)E2b (affected) 15.2(4)E5 (affected) 15.2(5)E2c (affected) 15.2(2)E8 (affected) 15.2(6)E0a (affected) 15.2(6)E1 (affected) 15.2(2)E7b (affected) 15.2(4)E5a (affected) 15.2(6)E0c (affected) 15.2(4)E6 (affected) 15.2(6)E2 (affected) 15.2(2)E9 (affected) 15.2(4)E7 (affected) 15.2(7)E (affected) 15.2(2)E10 (affected) 15.2(4)E8 (affected) 15.2(6)E2a (affected) 15.2(6)E2b (affected) 15.2(7)E1 (affected) 15.2(7)E0a (affected) 15.2(7)E0b (affected) 15.2(7)E0s (affected) 15.2(6)E3 (affected) 15.2(4)E9 (affected) 15.2(7)E2 (affected) 15.2(7a)E0b (affected) 15.2(4)E10 (affected) 15.2(7)E3 (affected) 15.2(7)E1a (affected) 15.2(7b)E0b (affected) 15.2(7)E2a (affected) 15.2(4)E10a (affected) 15.2(7)E4 (affected) 15.2(7)E3k (affected) 15.2(8)E (affected) 15.2(8)E1 (affected) 15.2(7)E5 (affected) 15.2(7)E6 (affected) 15.2(8)E2 (affected) 15.2(4)E10d (affected) 15.2(7)E7 (affected) 15.2(8)E3 (affected) 15.2(7)E8 (affected) 15.2(8)E4 (affected) 15.1(3)MRA (affected) 15.1(3)MRA1 (affected) 15.1(3)MRA2 (affected) 15.1(3)MRA3 (affected) 15.1(3)MRA4 (affected) 15.1(3)SVB1 (affected) 15.1(3)SVB2 (affected) 15.4(1)S (affected) 15.4(2)S (affected) 15.4(3)S (affected) 15.4(1)S1 (affected) 15.4(1)S2 (affected) 15.4(2)S1 (affected) 15.4(1)S3 (affected) 15.4(3)S1 (affected) 15.4(2)S2 (affected) 15.4(3)S2 (affected) 15.4(3)S3 (affected) 15.4(1)S4 (affected) 15.4(2)S3 (affected) 15.4(2)S4 (affected) 15.4(3)S4 (affected) 15.4(3)S5 (affected) 15.4(3)S6 (affected) 15.4(3)S7 (affected) 15.4(3)S6a (affected) 15.4(3)S8 (affected) 15.4(3)S9 (affected) 15.4(3)S10 (affected) 15.3(3)M (affected) 15.3(3)M1 (affected) 15.3(3)M2 (affected) 15.3(3)M3 (affected) 15.3(3)M5 (affected) 15.3(3)M4 (affected) 15.3(3)M6 (affected) 15.3(3)M7 (affected) 15.3(3)M8 (affected) 15.3(3)M9 (affected) 15.3(3)M10 (affected) 15.3(3)M8a (affected) 15.0(2)EZ (affected) 15.1(3)SVD (affected) 15.1(3)SVD1 (affected) 15.1(3)SVD2 (affected) 15.2(1)EY (affected) 15.0(2)EJ (affected) 15.0(2)EJ1 (affected) 15.2(1)SY (affected) 15.2(1)SY1 (affected) 15.2(1)SY0a (affected) 15.2(1)SY2 (affected) 15.2(2)SY (affected) 15.2(1)SY1a (affected) 15.2(2)SY1 (affected) 15.2(2)SY2 (affected) 15.2(1)SY3 (affected) 15.2(1)SY4 (affected) 15.2(2)SY3 (affected) 15.2(1)SY5 (affected) 15.2(1)SY6 (affected) 15.2(1)SY7 (affected) 15.2(1)SY8 (affected) 15.2(5)EX (affected) 15.1(3)SVF (affected) 15.1(3)SVF1 (affected) 15.1(3)SVE (affected) 15.4(3)M (affected) 15.4(3)M1 (affected) 15.4(3)M2 (affected) 15.4(3)M3 (affected) 15.4(3)M4 (affected) 15.4(3)M5 (affected) 15.4(3)M6 (affected) 15.4(3)M7 (affected) 15.4(3)M6a (affected) 15.4(3)M8 (affected) 15.4(3)M9 (affected) 15.4(3)M10 (affected) 15.0(2)EK (affected) 15.0(2)EK1 (affected) 15.4(1)CG (affected) 15.4(1)CG1 (affected) 15.4(2)CG (affected) 15.5(1)S (affected) 15.5(2)S (affected) 15.5(1)S1 (affected) 15.5(3)S (affected) 15.5(1)S2 (affected) 15.5(1)S3 (affected) 15.5(2)S1 (affected) 15.5(2)S2 (affected) 15.5(3)S1 (affected) 15.5(3)S1a (affected) 15.5(2)S3 (affected) 15.5(3)S2 (affected) 15.5(3)S0a (affected) 15.5(3)S3 (affected)
Cisco	Cisco IOS XE Software	3.7.0S (affected) 3.7.1S (affected) 3.7.2S (affected) 3.7.3S (affected) 3.7.4S (affected) 3.7.5S (affected) 3.7.6S (affected) 3.7.7S (affected) 3.7.4aS (affected) 3.7.2tS (affected) 3.7.0bS (affected) 3.7.1aS (affected) 3.3.0SG (affected) 3.3.2SG (affected) 3.3.1SG (affected) 3.8.0S (affected) 3.8.1S (affected) 3.8.2S (affected) 3.9.1S (affected) 3.9.0S (affected) 3.9.2S (affected) 3.9.1aS (affected) 3.9.0aS (affected) 3.4.0SG (affected) 3.4.2SG (affected) 3.4.1SG (affected) 3.4.3SG (affected) 3.4.4SG (affected) 3.4.5SG (affected) 3.4.6SG (affected) 3.4.7SG (affected) 3.4.8SG (affected) 3.5.0E (affected) 3.5.1E (affected) 3.5.2E (affected) 3.5.3E (affected) 3.10.0S (affected) 3.10.1S (affected) 3.10.2S (affected) 3.10.3S (affected) 3.10.4S (affected) 3.10.5S (affected) 3.10.6S (affected) 3.10.2tS (affected) 3.10.7S (affected) 3.10.1xbS (affected) 3.10.8S (affected) 3.10.8aS (affected) 3.10.9S (affected) 3.10.10S (affected) 3.11.1S (affected) 3.11.2S (affected) 3.11.0S (affected) 3.11.3S (affected) 3.11.4S (affected) 3.12.0S (affected) 3.12.1S (affected) 3.12.2S (affected) 3.12.3S (affected) 3.12.0aS (affected) 3.12.4S (affected) 3.13.0S (affected) 3.13.1S (affected) 3.13.2S (affected) 3.13.3S (affected) 3.13.4S (affected) 3.13.5S (affected) 3.13.2aS (affected) 3.13.0aS (affected) 3.13.5aS (affected) 3.13.6S (affected) 3.13.7S (affected) 3.13.6aS (affected) 3.13.7aS (affected) 3.13.8S (affected) 3.13.9S (affected) 3.13.10S (affected) 3.6.0E (affected) 3.6.1E (affected) 3.6.2aE (affected) 3.6.2E (affected) 3.6.3E (affected) 3.6.4E (affected) 3.6.5E (affected) 3.6.6E (affected) 3.6.5aE (affected) 3.6.5bE (affected) 3.6.7E (affected) 3.6.8E (affected) 3.6.7bE (affected) 3.6.9E (affected) 3.6.10E (affected) 3.14.0S (affected) 3.14.1S (affected) 3.14.2S (affected) 3.14.3S (affected) 3.14.4S (affected) 3.15.0S (affected) 3.15.1S (affected) 3.15.2S (affected) 3.15.1cS (affected) 3.15.3S (affected) 3.15.4S (affected) 3.16.0S (affected) 3.16.1S (affected) 3.16.1aS (affected) 3.16.2S (affected) 3.16.2aS (affected) 3.16.0cS (affected) 3.16.3S (affected) 3.16.2bS (affected) 3.16.3aS (affected) 3.16.4S (affected) 3.16.4aS (affected) 3.16.4bS (affected) 3.16.5S (affected) 3.16.4dS (affected) 3.16.6S (affected) 3.16.7S (affected) 3.16.6bS (affected) 3.16.7aS (affected) 3.16.7bS (affected) 3.16.8S (affected) 3.16.9S (affected) 3.16.10S (affected) 3.17.0S (affected) 3.17.1S (affected) 3.17.2S (affected) 3.17.1aS (affected) 3.17.3S (affected) 3.17.4S (affected) 16.1.1 (affected) 16.1.2 (affected) 16.1.3 (affected) 16.2.1 (affected) 16.2.2 (affected) 3.8.0E (affected) 3.8.1E (affected) 3.8.2E (affected) 3.8.3E (affected) 3.8.4E (affected) 3.8.5E (affected) 3.8.5aE (affected) 3.8.6E (affected) 3.8.7E (affected) 3.8.8E (affected) 3.8.9E (affected) 3.8.10E (affected) 16.3.1 (affected) 16.3.2 (affected) 16.3.3 (affected) 16.3.1a (affected) 16.3.4 (affected) 16.3.5 (affected) 16.3.5b (affected) 16.3.6 (affected) 16.3.7 (affected) 16.3.8 (affected) 16.3.9 (affected) 16.3.10 (affected) 16.3.11 (affected) 16.4.1 (affected) 16.4.2 (affected) 16.4.3 (affected) 16.5.1 (affected) 16.5.1a (affected) 16.5.1b (affected) 16.5.2 (affected) 16.5.3 (affected) 3.18.0aS (affected) 3.18.0S (affected) 3.18.1S (affected) 3.18.2S (affected) 3.18.3S (affected) 3.18.4S (affected) 3.18.0SP (affected) 3.18.1SP (affected) 3.18.1aSP (affected) 3.18.1bSP (affected) 3.18.1cSP (affected) 3.18.2SP (affected) 3.18.2aSP (affected) 3.18.3SP (affected) 3.18.4SP (affected) 3.18.3aSP (affected) 3.18.3bSP (affected) 3.18.5SP (affected) 3.18.6SP (affected) 3.18.7SP (affected) 3.18.8aSP (affected) 3.18.9SP (affected) 3.9.0E (affected) 3.9.1E (affected) 3.9.2E (affected) 16.6.1 (affected) 16.6.2 (affected) 16.6.3 (affected) 16.6.4 (affected) 16.6.5 (affected) 16.6.4a (affected) 16.6.5a (affected) 16.6.6 (affected) 16.6.7 (affected) 16.6.8 (affected) 16.6.9 (affected) 16.6.10 (affected) 16.7.1 (affected) 16.7.1a (affected) 16.7.1b (affected) 16.7.2 (affected) 16.7.3 (affected) 16.7.4 (affected) 16.8.1 (affected) 16.8.1a (affected) 16.8.1b (affected) 16.8.1s (affected) 16.8.1c (affected) 16.8.1d (affected) 16.8.2 (affected) 16.8.1e (affected) 16.8.3 (affected) 16.9.1 (affected) 16.9.2 (affected) 16.9.1a (affected) 16.9.1b (affected) 16.9.1s (affected) 16.9.3 (affected) 16.9.4 (affected) 16.9.3a (affected) 16.9.5 (affected) 16.9.5f (affected) 16.9.6 (affected) 16.9.7 (affected) 16.9.8 (affected) 16.10.1 (affected) 16.10.1a (affected) 16.10.1b (affected) 16.10.1s (affected) 16.10.1c (affected) 16.10.1e (affected) 16.10.1d (affected) 16.10.2 (affected) 16.10.1f (affected) 16.10.1g (affected) 16.10.3 (affected) 3.10.0E (affected) 3.10.1E (affected) 3.10.0cE (affected) 3.10.2E (affected) 3.10.3E (affected) 16.11.1 (affected) 16.11.1a (affected) 16.11.1b (affected) 16.11.2 (affected) 16.11.1s (affected) 16.12.1 (affected) 16.12.1s (affected) 16.12.1a (affected) 16.12.1c (affected) 16.12.1w (affected) 16.12.2 (affected) 16.12.1y (affected) 16.12.2a (affected) 16.12.3 (affected) 16.12.8 (affected) 16.12.2s (affected) 16.12.1x (affected) 16.12.1t (affected) 16.12.4 (affected) 16.12.3s (affected) 16.12.3a (affected) 16.12.4a (affected) 16.12.5 (affected) 16.12.6 (affected) 16.12.1z1 (affected) 16.12.5a (affected) 16.12.5b (affected) 16.12.1z2 (affected) 16.12.6a (affected) 16.12.7 (affected) 16.12.9 (affected) 3.11.0E (affected) 3.11.1E (affected) 3.11.2E (affected) 3.11.3E (affected) 3.11.1aE (affected) 3.11.4E (affected) 3.11.3aE (affected) 3.11.5E (affected) 3.11.6E (affected) 3.11.7E (affected) 3.11.8E (affected) 17.1.1 (affected) 17.1.1a (affected) 17.1.1s (affected) 17.1.1t (affected) 17.1.3 (affected) 17.2.1 (affected) 17.2.1r (affected) 17.2.1a (affected) 17.2.1v (affected) 17.2.2 (affected) 17.2.3 (affected) 17.3.1 (affected) 17.3.2 (affected) 17.3.3 (affected) 17.3.1a (affected) 17.3.1w (affected) 17.3.2a (affected) 17.3.1x (affected) 17.3.1z (affected) 17.3.4 (affected) 17.3.5 (affected) 17.3.4a (affected) 17.3.6 (affected) 17.3.4b (affected) 17.3.4c (affected) 17.3.5a (affected) 17.3.5b (affected) 17.3.7 (affected) 17.4.1 (affected) 17.4.2 (affected) 17.4.1a (affected) 17.4.1b (affected) 17.4.2a (affected) 17.5.1 (affected) 17.5.1a (affected) 17.5.1c (affected) 17.6.1 (affected) 17.6.2 (affected) 17.6.1w (affected) 17.6.1a (affected) 17.6.1x (affected) 17.6.3 (affected) 17.6.1y (affected) 17.6.1z (affected) 17.6.3a (affected) 17.6.4 (affected) 17.6.1z1 (affected) 17.6.5 (affected) 17.6.5a (affected) 17.7.1 (affected) 17.7.1a (affected) 17.7.1b (affected) 17.7.2 (affected) 17.10.1 (affected) 17.10.1a (affected) 17.10.1b (affected) 17.8.1 (affected) 17.8.1a (affected) 17.9.1 (affected) 17.9.1w (affected) 17.9.2 (affected) 17.9.1a (affected) 17.9.1x (affected) 17.9.1y (affected) 17.9.3 (affected) 17.9.2a (affected) 17.9.1x1 (affected) 17.9.3a (affected) 17.9.1y1 (affected) 17.11.1 (affected) 17.11.1a (affected) 17.11.99SW (affected)

The record lists more products or versions than are shown here.

Timeline

27 Sep 2023 Published
10 Oct 2023 CVE-2023-20109 added to CISA KEV
10 Oct 2023 Added to the CISA KEV catalogue

Weakness

CWE-787

References

cisco-sa-getvpn-rce-g8qR68sx