MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2018-0415

CVSS 6.8v3.0pub. 2018-08-15upd. 2024-11-21

A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Series Wireless Access Points could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of certain EAPOL frames. An attacker could exploit this vulnerability by sending a stream of crafted EAPOL frames to an affected device. A successful exploit could allow the attacker to force the access point (AP) to disassociate all the associated stations (STAs) and to disallow future, new association requests. Cisco Bug IDs: CSCvj97472.

CVSS Vector
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
  • Cisco Wap121

    HW
    Cisco
    wszystkie wersje
  • Cisco Wap121 Firmware

    OS
    Cisco
    ≤ 1.0.6.6
  • Cisco Wap125

    HW
    Cisco
    wszystkie wersje
  • Cisco Wap125 Firmware

    OS
    Cisco
    ≤ 1.0.6.6
  • Cisco Wap131

    HW
    Cisco
    wszystkie wersje
  • Cisco Wap131 Firmware

    OS
    Cisco
    ≤ 1.0.6.6
  • Cisco Wap150

    HW
    Cisco
    wszystkie wersje
  • Cisco Wap150 Firmware

    OS
    Cisco
    ≤ 1.0.6.6
  • Cisco Wap321

    HW
    Cisco
    wszystkie wersje
  • Cisco Wap321 Firmware

    OS
    Cisco
    ≤ 1.0.6.6
  • Cisco Wap351

    HW
    Cisco
    wszystkie wersje
  • Cisco Wap351 Firmware

    OS
    Cisco
    ≤ 1.0.6.6
  • Cisco Wap361

    HW
    Cisco
    wszystkie wersje
  • Cisco Wap361 Firmware

    OS
    Cisco
    ≤ 1.0.6.6
  • Cisco Wap371

    HW
    Cisco
    wszystkie wersje
  • Cisco Wap371 Firmware

    OS
    Cisco
    ≤ 1.0.6.6
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2021-1401HIGH8.8ten sam produkt

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 5...

CVE-2021-1400HIGH8.8ten sam produkt

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 5...

CVE-2020-12695HIGH7.5ten sam produkt

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subs...

CVE-2024-20335MEDIUM6.5ten sam produkt

A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireles...

CVE-2024-20336MEDIUM6.5ten sam produkt

A vulnerability in the web-based user interface of Cisco Small Business 100, 300, and 500 Series Wireless APs ...