Lucene search

CiscoCVE-2016-9220

HistoryJan 26, 2017 - 7:59 a.m.

CVE-2016-9220

2017-01-2607:59:00

CWE-399

cisco

web.nvd.nist.gov

cve-2016-9220

denial of service

802.11

cisco

aps

vulnerability

nvd

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

CVSS3

4.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

4.5

Confidence

High

EPSS

0.001

Percentile

29.6%

JSON

A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access Points (APs) could allow an unauthenticated, adjacent attacker to cause the connection table to be full of invalid connections and be unable to process new incoming requests. More Information: CSCvb66659. Known Affected Releases: 8.2(130.0). Known Fixed Releases: 8.2(131.10) 8.2(131.6) 8.2(141.0) 8.3(104.56) 8.4(1.88) 8.4(1.91).

Affected configurations

Nvd

Node

ciscoaironet_access_point_softwareMatch8.2\(130.0\)

VendorProductVersionCPE
ciscoaironet_access_point_software8.2(130.0)cpe:2.3:o:cisco:aironet_access_point_software:8.2\(130.0\):*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	aironet_access_point_software	8.2(130.0)	cpe:2.3:o:cisco:aironet_access_point_software:8.2\(130.0\):::::::*

CNA Affected

[
  {
    "product": "Cisco Mobility Express 2800 and 3800",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Mobility Express 2800 and 3800"
      }
    ]
  }
]

References

www.securityfocus.com/bid/95633

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-cme1

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

CVSS3

4.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

4.5

Confidence

High

EPSS

0.001

Percentile

29.6%

JSON

Related for CVE-2016-9220