CVE-2023-20047

CVE-2023-20047 is a medium-severity denial-of-service vulnerability affecting Cisco Webex Room Phone and Webex Share devices. An unauthenticated, adjacent attacker can exploit insufficient resource allocation in the Link Layer Discovery Protocol (LLDP) feature by sending crafted LLDP traffic. This can exhaust device memory, crashing the LLDP process and potentially interrupting calling if LLDP is the sole discovery protocol. While the CVSS score is 6.5, indicating a medium severity, there is currently no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low immediate threat.