Input validation

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition of an affected...

Input validation

A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points APs Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this...

Input validation

A vulnerability in Cisco Aironet Access Points APs could allow an unauthenticated, remote attacker to cause a denial of service DoS on an affected device. The vulnerability is due to improper resource management while processing specific packets. An attacker could exploit this vulnerability by...

CVE-2020-3489

CVE-2020-3489 affects Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers. The issue arises in CAPWAP packet processing where insufficient validation can allow an unauthenticated, adjacent attacker to send malformed CAPWAP packets, potentially crashing and reloading the device and...

CVE-2020-3494 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition of an affected...

CVE-2020-3494

Cisco CVE-2020-3494 affects Cisco IOS XE Software for the Catalyst 9800 Series Wireless Controllers and relates to multiple CAPWAP processing vulnerabilities caused by insufficient validation of CAPWAP packets. An unauthenticated, adjacent attacker can send malformed CAPWAP packets to trigger a c...

CVE-2020-3552 Cisco Aironet Access Points Ethernet Wired Clients Denial of Service Vulnerability

A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points APs Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this...

CVE-2020-3552

CVE-2020-3552 affects Cisco Aironet Access Points (APs) with vulnerable Ethernet packet handling. An unauthenticated, adjacent attacker can send a rapid sequence of crafted packets to the Ethernet interface, triggering insufficient input validation and a NULL pointer access that reloads the devic...

CVE-2020-3560

Cisco Aironet Access Points are affected by CVE-2020-3560 due to improper resource management when processing certain UDP packets. An unauthenticated, remote attacker could leverage crafted UDP traffic to a specific port to cause a DoS, either by tearing down the AP–WLC connection or by forcing t...

CVE-2020-3560 Cisco Aironet Access Points UDP Flooding Denial of Service Vulnerability

A vulnerability in Cisco Aironet Access Points APs could allow an unauthenticated, remote attacker to cause a denial of service DoS on an affected device. The vulnerability is due to improper resource management while processing specific packets. An attacker could exploit this vulnerability by...

Cisco Aironet Access Points UDP Flooding Denial of Service Vulnerability

A vulnerability in Cisco Aironet Access Points APs could allow an unauthenticated, remote attacker to cause a denial of service DoS on an affected device. The vulnerability is due to improper resource management while processing specific packets. An attacker could exploit this vulnerability by...

Cisco Aironet Access Points Ethernet Wired Clients Denial of Service Vulnerability

A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points APs Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this...

Spoofable Frames

linux is vulnerable to spoofable network frames. The vulnerability exists through the reinstallation of the Integrity Group Temporal Key IGTK during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients...

HPESBNW04041 rev.3 - Aruba Products, TCP SACK PANIC - Kernel Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Airwave Software 8.2.9.1 and below Aruba ClearPass Policy Manager 6.7.12, 6.8.3 and below Aruba CX 6200F Switch Series 10.2 and below Aruba 6300 Switch Series 10.2 and bel...

CVE-2020-12106

The Web portal of the WiFi module of VPNCrypt M10 2.6.5 allows unauthenticated users to send HTTP POST request to several critical Administrative functions such as, changing credentials of the Administrator account or connect the product to a rogue access point...

CVE-2020-12106

The Web portal of the WiFi module of VPNCrypt M10 2.6.5 allows unauthenticated users to send HTTP POST request to several critical Administrative functions such as, changing credentials of the Administrator account or connect the product to a rogue access point...

h1-ctf: [h1-2006 2020] Write up for H1-2006 CTF

I huffed and puffed my way up a flight of stairs into a dimly lit, dusty room, looking for Sherlock. As I made way through scattered books, I exclaimed, "Sherlock, wake up! It’s that time of the year. h1-ctf, a chance to get an invitation to hackerone’s live hacking event. “zer0ttl, of course! Yo...

The vulnerability in the web-based management interface of Cisco Mobility Express software for Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, 3800, 4800, Cisco Catalyst 9100, and Cisco 6300 allows a intruder to perform arbitrary actions on the vulnerable device.

The vulnerability in the web interface of Cisco Mobility Express software for Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, 3800, 4800, Cisco Catalyst 9100, and Cisco 6300 is related to the manipulation of inter-site requests. Exploiting this vulnerability allows an attacker to...

The vulnerability of Cisco Aironet Access Points of models 1540 and 1800, related to improper processing of client packets sent to the vulnerable access point, allows a perpetrator to cause service failure.

The vulnerability of Cisco Aironet Access Points models 1540 and 1800 relates to the improper processing of client packets sent to the vulnerable access points. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted packets...

The vulnerability of the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol in Cisco Wireless LAN Controller (WLC) software allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation in Cisco Wireless LAN Controller WLC software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending a special...