MEDIUM✓ PATCH🇬🇧 English

CVE-2018-0412

CVSS 5.3v3.0pub. 2018-08-15upd. 2024-11-21

A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Series Wireless Access Points could allow an unauthenticated, adjacent attacker to force the downgrade of the encryption algorithm that is used between an authenticator (access point) and a supplicant (Wi-Fi client). The vulnerability is due to the improper processing of certain EAPOL messages that are received during the Wi-Fi handshake process. An attacker could exploit this vulnerability by establishing a man-in-the-middle position between a supplicant and an authenticator and manipulating an EAPOL message exchange to force usage of a WPA-TKIP cipher instead of the more secure AES-CCMP cipher. A successful exploit could allow the attacker to conduct subsequent cryptographic attacks, which could lead to the disclosure of confidential information. Cisco Bug IDs: CSCvj29229.

oryginał EN
CVSS Vector
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

  • Cisco Wap121

    HW
    Cisco
    wszystkie wersje

  • Cisco Wap121 Firmware

    OS
    Cisco
    ≤ 1.0.6.6

  • Cisco Wap125

    HW
    Cisco
    wszystkie wersje

  • Cisco Wap125 Firmware

    OS
    Cisco
    ≤ 1.0.6.6

  • Cisco Wap131

    HW
    Cisco
    wszystkie wersje

  • Cisco Wap131 Firmware

    OS
    Cisco
    ≤ 1.0.6.6

  • Cisco Wap150

    HW
    Cisco
    wszystkie wersje

  • Cisco Wap150 Firmware

    OS
    Cisco
    ≤ 1.0.6.6

  • Cisco Wap321

    HW
    Cisco
    wszystkie wersje

  • Cisco Wap321 Firmware

    OS
    Cisco
    ≤ 1.0.6.6

  • Cisco Wap351

    HW
    Cisco
    wszystkie wersje

  • Cisco Wap351 Firmware

    OS
    Cisco
    ≤ 1.0.6.6

  • Cisco Wap361

    HW
    Cisco
    wszystkie wersje

  • Cisco Wap361 Firmware

    OS
    Cisco
    ≤ 1.0.6.6

  • Cisco Wap371

    HW
    Cisco
    wszystkie wersje

  • Cisco Wap371 Firmware

    OS
    Cisco
    ≤ 1.0.6.6
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2021-1401HIGH8.8ten sam produkt

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 5...

CVE-2021-1400HIGH8.8ten sam produkt

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 5...

CVE-2020-12695HIGH7.5ten sam produkt

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subs...

CVE-2024-20335MEDIUM6.5ten sam produkt

A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireles...

CVE-2024-20336MEDIUM6.5ten sam produkt

A vulnerability in the web-based user interface of Cisco Small Business 100, 300, and 500 Series Wireless APs ...