Cisco Aironet Access Points BPDU Redirection DoS

The vulnerability of the BPDU frame redirection function in Cisco Aironet Access Points of the 1540, 1560, 1800, 2800, and 3800 series exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Cisco Aironet Access Points Resource Release Error

The vulnerability of the microprogramming software on Cisco Aironet Access Points of the 1560, 2800, 3800, and 4800 series is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failure by sending distorted frames to the vulnerable device...

Authentication flaw

A vulnerability in Central Web Authentication CWA with FlexConnect Access Points APs for Cisco Aironet 1560, 1810, 1810w, 1815, 1830, 1850, 2800, and 3800 Series APs could allow an authenticated, adjacent attacker to bypass a configured FlexConnect access control list ACL. The vulnerability is du...

PT-2018-8687

Name of the Vulnerable Software and Affected Versions: Cisco Aironet 1800 Series Access Points versions 8.2.121.0 through 8.5.105.0 Cisco Aironet 2800 Series Access Points versions 8.3.102.0 through 8.5.105.0 Cisco Aironet 3800 Series Access Points versions 8.3.102.0 through 8.5.105.0 Description...

CVE-2018-0226: Undefined Security Weakness

A vulnerability in the assignment and management of default user accounts for Secure Shell SSH access to Cisco Aironet 1800, 2800, and 3800 Series Access Points that are running Cisco Mobility Express Software could allow an authenticated, remote attacker to gain elevated privileges on an affecte...

Race condition

A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service DoS condition. The...

CVE-2017-12273

A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service DoS condition. The...

Cisco Aironet Access Points Denial of Service Vulnerability (CNVD-2017-32919)

The Cisco Aironet 1560, 2800, and 3800 Series Access Points are router access devices from Cisco, Inc. A denial of service vulnerability exists in the 802.11 association request frame handling in the Cisco Aironet 1560, 2800, and 3800 Series Access Points, which arises from a program that fails t...

CVE-2017-12283: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the handling of 802.11w Protected Management Frames PAF by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device, aka Denial of Service. The vulnerability exists because the affected...

CVE-2017-12274: Improper Input Validation

A vulnerability in Extensible Authentication Protocol EAP ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service...

PT-2017-12457

Name of the Vulnerable Software and Affected Versions Cisco Aironet 3800 Series Access Points affected versions not specified Description A vulnerability exists in the handling of 802.11w Protected Management Frames PAF that could allow an unauthenticated, adjacent attacker to terminate a valid...

PT-2017-12455

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1800, 2800, and 3800 Series Access Points affected versions not specified Description A vulnerability in the implementation of Protected Extensible Authentication Protocol PEAP functionality for standalone configurations could...

CVE-2017-12273: Improper Input Validation

A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service DoS condition. The...

PT-2017-12448

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1560 Series Access Points Cisco Aironet 2800 Series Access Points Cisco Aironet 3800 Series Access Points Description A vulnerability in 802.11 association request frame processing could allow an unauthenticated, Layer 2 radio...

CVE-2017-12281: Improper Authentication

A vulnerability in the implementation of Protected Extensible Authentication Protocol PEAP functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected...

PT-2017-12449

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1560 Series Access Points Cisco Aironet 2800 Series Access Points Cisco Aironet 3800 Series Access Points Description A vulnerability in Extensible Authentication Protocol EAP ingress frame processing could allow an...

PT-2017-16153

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1800, 2800, and 3800 Series Access Points version 8.3.102.0 Description A vulnerability in the Plug-and-Play PnP subsystem could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges due to...

CVE-2017-3873: Improper Input Validation

A vulnerability in the Plug-and-Play PnP subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Access Point AP or Mobility Express image could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges. The vulnerability is...

CVE-2016-9197

A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers could allow an authenticated, local attacker to obtain access to the underlying operating system shell with root-level privileges. More Information: CSCvb70351. Known Affected...

CVE-2016-9197

CVE-2016-9197 affects Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers. The root cause is a vulnerability in the CLI command parser due to incorrect permissions assigned to configured users, enabling an authenticated, local attacker to obtain access to the underlying operating...