QID 317147

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP)
protocol processing of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family
could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

Affected Products
Cisco devices if they are running a vulnerable release of Cisco IOS XE Wireless Controller Software
for the Catalyst 9000 Family and have the mDNS gateway feature enabled (disabled by default):
Catalyst 9800 Embedded Wireless Controllers for Catalyst 9300, 9400, and 9500 Series Switches
Catalyst 9800 Series Wireless Controllers
Catalyst 9800-CL Wireless Controllers for Cloud
Embedded Wireless Controllers on Catalyst Access Points

QID Detection Logic (Authenticated):
The check matches Cisco IOS XE version retrieved via Unix Auth using "show version" command.
QID Detection Logic (Unauthenticated):
The check matches Cisco IOS XE version retrieved via SNMP or TCP/IP Fingerprint or NTP or Telnet.

A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition.