CVE-2021-1437: Undefined Security Weakness

A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential information from an affected device. This vulnerability is due to an unrestricted Trivial File Transfer Protocol TFTP...

Central Web Authentication ACL Bypass Vulnerability in Multiple Cisco Devices

Cisco Aironet 1560 Series Access Points and others are different families of wireless access point devices from Cisco, Inc.Central Web Authentication CWA with FlexConnect Access Points APs is one of the a component for configuring Central Web Authentication using wireless access points. A securit...

CVE-2018-0250

A vulnerability in Central Web Authentication CWA with FlexConnect Access Points APs for Cisco Aironet 1560, 1810, 1810w, 1815, 1830, 1850, 2800, and 3800 Series APs could allow an authenticated, adjacent attacker to bypass a configured FlexConnect access control list ACL. The vulnerability is du...

CVE-2018-0247

A vulnerability in Web Authentication WebAuth clients for the Cisco Wireless LAN Controller WLC and Aironet Access Points running Cisco IOS Software could allow an unauthenticated, adjacent attacker to bypass authentication and pass traffic. The vulnerability is due to incorrect implementation of...

CVE-2018-0250

A vulnerability in Central Web Authentication CWA with FlexConnect Access Points APs for Cisco Aironet 1560, 1810, 1810w, 1815, 1830, 1850, 2800, and 3800 Series APs could allow an authenticated, adjacent attacker to bypass a configured FlexConnect access control list ACL. The vulnerability is du...

CVE-2018-0247

A vulnerability in Web Authentication WebAuth clients for the Cisco Wireless LAN Controller WLC and Aironet Access Points running Cisco IOS Software could allow an unauthenticated, adjacent attacker to bypass authentication and pass traffic. The vulnerability is due to incorrect implementation of...

CVE-2018-0250

A vulnerability in Central Web Authentication CWA with FlexConnect Access Points APs for Cisco Aironet 1560, 1810, 1810w, 1815, 1830, 1850, 2800, and 3800 Series APs could allow an authenticated, adjacent attacker to bypass a configured FlexConnect access control list ACL. The vulnerability is du...

CVE-2018-0250

CVE-2018-0250 concerns Cisco Aironet Central Web Authentication (CWA) with FlexConnect APs. The issue is that the AP can ignore the ACL downloaded from the client during authentication, allowing an authenticated, adjacent attacker to bypass the configured FlexConnect ACL. Affected devices include...

Cisco Aironet Access Points Central Web Authentication FlexConnect Client ACL Bypass Vulnerability

A vulnerability in Central Web Authentication CWA with FlexConnect Access Points APs for Cisco Aironet 1560, 1810, 1810w, 1815, 1830, 1850, 2800, and 3800 Series APs could allow an authenticated, adjacent attacker to bypass a configured FlexConnect access control list ACL. The vulnerability is du...

CVE-2018-0250: Protection Mechanism Failure

A vulnerability in Central Web Authentication CWA with FlexConnect Access Points APs for Cisco Aironet 1560, 1810, 1810w, 1815, 1830, 1850, 2800, and 3800 Series APs could allow an authenticated, adjacent attacker to bypass a configured FlexConnect access control list ACL. The vulnerability is du...

PT-2018-8698

Name of the Vulnerable Software and Affected Versions: Cisco Aironet Access Points running Cisco IOS Software versions prior to 8.5.110.0 Cisco Wireless LAN Controller WLC versions prior to 8.5.110.0 Description: A vulnerability in Web Authentication WebAuth clients could allow an unauthenticated...

PT-2018-8700

Name of the Vulnerable Software and Affected Versions: Cisco Aironet 1560 Series Access Points affected versions not specified Cisco Aironet 1810 Series OfficeExtend Access Points affected versions not specified Cisco Aironet 1810w Series Access Points affected versions not specified Cisco Airone...

Authentication flaw

A vulnerability in the implementation of Protected Extensible Authentication Protocol PEAP functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected...

CVE-2017-12281

A vulnerability in the implementation of Protected Extensible Authentication Protocol PEAP functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected...

CVE-2017-12283

A vulnerability in the handling of 802.11w Protected Management Frames PAF by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device, aka Denial of Service. The vulnerability exists because the affected...

CVE-2017-12281

Cisco Aironet 1800/2800/3800 Series Access Points with standalone WLAN configurations (FlexConnect local switching and central authentication with MAC filtering) are affected by CVE-2017-12281 due to an incorrect default fail-open setting. This enables an unauthenticated, adjacent attacker to byp...

CVE-2017-12283

CVE-2017-12283 describes a Denial of Service vulnerability in Cisco Aironet 3800 Series Access Points related to improper validation of 802.11w Protected Management Frames (PAF) deauthentication/disassociation frames. An unauthenticated, adjacent attacker could terminate a single valid user conne...

CVE-2017-12283: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the handling of 802.11w Protected Management Frames PAF by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device, aka Denial of Service. The vulnerability exists because the affected...

Cisco Application Visibility and Control Denial of Service Vulnerability

Cisco Application Visibility and Control is a family of services for application layer classification, monitoring, and traffic control network devices. A security vulnerability exists in Cisco Application Visibility and Control AVC 15.33JA with FlexConnect enabled, which allows remote attackers t...

Code injection

Cisco Application Visibility and Control AVC 15.33JA, when FlexConnect is enabled, allows remote attackers to cause a denial of service access-point outage via a crafted UDP packet, aka Bug ID CSCuu47016...