Lucene search
K

17 matches found

BDU FSTEC
BDU FSTEC
added 2023/01/04 12:0 a.m.4 views

The vulnerability in the implementation of the Simple Network Management Protocol (SNMP) on Cisco IOS XE Catalyst access points and Cisco Catalyst 9000 wireless network controllers, related to errors in request processing, allows a perpetrator to disclose protected information.

The vulnerability of the Simple Network Management Protocol SNMP implementation on Cisco IOS XE Catalyst access points and Cisco Catalyst 9000 wireless network controllers is related to errors in handling requests. Exploiting this vulnerability can allow a malicious actor to disclose protected...

7.8CVSS6.5AI score0.00651EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/01/04 12:0 a.m.4 views

The vulnerability relates to the implementation of the Control and Provisioning of Wireless Access Points protocol (CAPWAP) in Cisco IOS XE operating systems, Catalyst access points, and Cisco Catalyst 9000 series wireless network controllers. It stems from insufficient resource management during their existence, allowing attackers to trigger service interruptions.

The vulnerability of the CAPWAP protocol implementation for Cisco IOS XE operating systems, Catalyst access points, and Cisco Catalyst 9000 series wireless network controllers is related to insufficient resource management during their existence. Exploiting this vulnerability could allow a...

8.6CVSS7.2AI score0.01083EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/09/30 7:15 p.m.6 views

CVE-2022-20855

A vulnerability in the self-healing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points could allow an authenticated, local attacker to escape the restricted controller shell and execute arbitrary commands on the underlying operating system of the...

6.7CVSS6AI score0.0034EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2022/09/29 12:0 a.m.32 views

Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points Privilege Escalation (cisco-sa-ewc-priv-esc-nderYLtK)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the self-healing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points could allow an authenticated, local attacker to escape the...

7.9CVSS7.1AI score0.0034EPSS
Exploits0References4
Cisco
Cisco
added 2022/09/28 4:0 p.m.37 views

Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points Privilege Escalation Vulnerability

A vulnerability in the self-healing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points could allow an authenticated, local attacker to escape the restricted controller shell and execute arbitrary commands on the underlying operating system of the...

7.9CVSS7.4AI score0.0034EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/06/10 12:0 a.m.4 views

The vulnerability affects the implementation of the Control Point Access Point Wireless Provisioning Protocol (CAPWAP) on Cisco IOS XE operating systems, as well as Control Points and Cisco Catalyst 9800 and 9800-CL for Cloud wireless network controllers. This allows a malicious actor to cause service interruptions.

The vulnerability of the CAPWAP protocol implementation in Cisco IOS XE operating systems, as well as in Catalyst access points and Cisco Catalyst 9800 and 9800-CL for Cloud wireless network controllers, is related to an unvalidated return value that causes the zero pointer to be swapped...

8.6CVSS6.5AI score0.01256EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/05/30 12:0 a.m.4 views

The vulnerability in the implementation of the Simple Network Management Protocol (SNMP) on Cisco IOS XE-based Catalyst access points and Cisco Catalyst 9800 and 9800-CL for Cloud wireless network controllers allows a attacker to cause service interruptions.

The vulnerability of the Simple Network Management Protocol SNMP implementation in Cisco IOS XE Catalyst access points and Cisco Catalyst 9800 and 9800-CL for Cloud wireless network controllers is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to...

7.4CVSS6.3AI score0.00503EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:0 a.m.5 views

The software vulnerability of the Cisco Embedded Wireless Controller with Catalyst Access Points allows a intruder to trigger a device reboot or a service failure.

The vulnerability of the Cisco Embedded Wireless Controller with Catalyst Access Points relates to the exhaustion of memory resources. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause a service failure...

9CVSS6.5AI score0.01294EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/04/15 3:15 p.m.4 views

CVE-2022-20622

A vulnerability in IP ingress packet processing of the Cisco Embedded Wireless Controller with Catalyst Access Points Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service DoS condition. The device may experience a...

7.5CVSS6.6AI score0.01294EPSS
Exploits0References1
Prion
Prion
added 2022/04/15 3:15 p.m.16 views

Input validation

A vulnerability in IP ingress packet processing of the Cisco Embedded Wireless Controller with Catalyst Access Points Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service DoS condition. The device may experience a...

7.8CVSS7.5AI score0.01294EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/04/15 2:17 p.m.90 views

CVE-2022-20622

CVE-2022-20622 affects Cisco’s Embedded Wireless Controller with Catalyst Access Points Software. The root cause is improper rate limiting of IP packets to the management interface, enabling an unauthenticated, remote attacker to send a high-rate stream to the management interface. This can cause...

8.6CVSS7.7AI score0.01294EPSS
Exploits0References1Affected Software1
Cisco
Cisco
added 2022/04/13 4:0 p.m.42 views

Cisco Embedded Wireless Controller with Catalyst Access Points IP Flood Denial of Service Vulnerability

A vulnerability in IP ingress packet processing of the Cisco Embedded Wireless Controller with Catalyst Access Points Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service DoS condition. The device may experience a...

8.6CVSS8AI score0.01294EPSS
Exploits0References1
OSV
OSV
added 2021/09/23 3:15 a.m.2 views

CVE-2021-1615

A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller EWC Software for Catalyst Access Points APs could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected AP. This vulnerability is due to insufficient buffer...

8.6CVSS7.5AI score0.01285EPSS
Exploits0References1
Prion
Prion
added 2021/09/23 3:15 a.m.16 views

Design/Logic Flaw

A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller EWC Software for Catalyst Access Points APs could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected AP. This vulnerability is due to insufficient buffer...

5CVSS8.4AI score0.01285EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2021/09/22 12:0 a.m.4 views

Cisco Embedded Wireless Controller 安全漏洞

Cisco Embedded Wireless Controller is a wireless access point from Cisco USA. A security vulnerability exists in the Cisco Embedded Wireless Controller that stems from an under-allocation of buffers in the router software packet processing function used in Catalyst access points. The vulnerabilit...

8.6CVSS8.1AI score0.01285EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2021/09/22 12:0 a.m.26 views

Cisco IOS XE Software Embedded Wireless Controller for Catalyst Access Points Denial of Service (cisco-sa-iosxe-ewc-dos-g6JruHRT)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller EWC Software for Catalyst Access Points APs could allow an unauthenticated, remote attacker to cause a denia...

8.6CVSS8.1AI score0.01285EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/11/05 12:0 a.m.5 views

The vulnerability of Cisco Aironet, Catalyst, and Business access points relates to uncontrolled resource consumption, allowing attackers to cause service interruptions.

The vulnerability of Cisco Aironet and Catalyst access points is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

8.6CVSS7.6AI score0.01415EPSS
Exploits0References3Affected Software3
Rows per page
Query Builder