Lucene search
HistoryOct 03, 2022 - 4:24 p.m.
CVE-2009-2976
cisco
aironet
lightweight
access point
ap
vulnerability
cleartext
multicast
data frames
remote attackers
wireless lan controller
mac addresses
ip addresses
sniffing
wireless network
nvd
6.9 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.001 Low
EPSS
Percentile
49.6%
Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network.
Affected configurations
Node
ciscoaironet_ap1100
ORciscoaironet_ap1200
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:aironet_ap1100 | cisco aironet ap1100 | eq | * |
| cisco:aironet_ap1200 | cisco aironet ap1200 | eq | * |
Related
prion
prion
Code injection
2009-08-27 17:30:00
cvelist
cvelist
CVE-2009-2976
2022-10-03 16:24:06
nvd
nvd
CVE-2009-2976
2009-08-27 17:30:00
6.9 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.001 Low
EPSS
Percentile
49.6%
Related for CVE-2009-2976