Race condition

A vulnerability in the packet processing code of Cisco IOS Software for Cisco Aironet Access Points could allow an unauthenticated, adjacent attacker to retrieve content from memory on an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to...

Design/Logic Flaw

A vulnerability in the handling of 802.11w Protected Management Frames PAF by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device, aka Denial of Service. The vulnerability exists because the affected...

Design/Logic Flaw

A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is...

CVE-2017-12262

A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is...

CVE-2017-12283

A vulnerability in the handling of 802.11w Protected Management Frames PAF by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device, aka Denial of Service. The vulnerability exists because the affected...

CVE-2017-12274

Cisco Aironet 1560, 2800, and 3800 Series Access Points are affected by CVE-2017-12274 due to improper validation in Extensible Authentication Protocol (EAP) ingress frame processing. An unauthenticated, Layer 2 adjacent attacker can trigger a reload of the AP by sending a malformed EAP frame, re...

CVE-2017-12273

A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service DoS condition. The...

CVE-2017-12262

A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is...

CVE-2017-12283

A vulnerability in the handling of 802.11w Protected Management Frames PAF by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device, aka Denial of Service. The vulnerability exists because the affected...

CVE-2017-12275: Improper Input Validation

A vulnerability in the implementation of 802.11v Basic Service Set BSS Transition Management functionality in Cisco Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. The...

CVE-2017-12273: Improper Input Validation

A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service DoS condition. The...

CVE-2017-12279: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the packet processing code of Cisco IOS Software for Cisco Aironet Access Points could allow an unauthenticated, adjacent attacker to retrieve content from memory on an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to...

PT-2017-12448

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1560 Series Access Points Cisco Aironet 2800 Series Access Points Cisco Aironet 3800 Series Access Points Description A vulnerability in 802.11 association request frame processing could allow an unauthenticated, Layer 2 radio...

CVE-2017-12274: Improper Input Validation

A vulnerability in Extensible Authentication Protocol EAP ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service...

CVE-2017-12282: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the Access Network Query Protocol ANQP ingress frame processing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, Layer 2 RF-adjacent attacker to cause an affected device to restart unexpectedly, resulting in a denial of service DoS condition. The...

PT-2017-12437

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller Enterprise Module versions prior to 1.5 Description A misconfiguration in the firewall configuration could allow an unauthenticated, adjacent attacker to gain privileged access to services on...

PT-2017-12449

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1560 Series Access Points Cisco Aironet 2800 Series Access Points Cisco Aironet 3800 Series Access Points Description A vulnerability in Extensible Authentication Protocol EAP ingress frame processing could allow an...

PT-2017-12455

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1800, 2800, and 3800 Series Access Points affected versions not specified Description A vulnerability in the implementation of Protected Extensible Authentication Protocol PEAP functionality for standalone configurations could...

Cisco Aironet Access Points MAC Authentication Bypass Vulnerability

A vulnerability in the implementation of Protected Extensible Authentication Protocol PEAP functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected...

PT-2017-12456

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controllers affected versions not specified Description A vulnerability in the Access Network Query Protocol ANQP ingress frame processing functionality could allow an unauthenticated, Layer 2 RF-adjacent attacker to cause a...