CVE-2017-12279

CVE-2017-12279 affects Cisco IOS Software for Cisco Aironet Access Points. The issue is in the packet processing code where padding added to egress packets allows an unauthenticated, adjacent attacker to retrieve content from memory, leading to information disclosure. Root cause is insufficient c...

CVE-2017-12283

CVE-2017-12283 describes a Denial of Service vulnerability in Cisco Aironet 3800 Series Access Points related to improper validation of 802.11w Protected Management Frames (PAF) deauthentication/disassociation frames. An unauthenticated, adjacent attacker could terminate a single valid user conne...

CVE-2017-12281

Cisco Aironet 1800/2800/3800 Series Access Points with standalone WLAN configurations (FlexConnect local switching and central authentication with MAC filtering) are affected by CVE-2017-12281 due to an incorrect default fail-open setting. This enables an unauthenticated, adjacent attacker to byp...

Cisco Aironet Access Points Denial of Service Vulnerability (CNVD-2017-32920)

The Cisco Aironet 1560, 2800, and 3800 Series Access Points are router access devices from Cisco, Inc. A denial of service vulnerability exists in the Extensible Authentication Protocol EAP ingress frames handling in the Cisco Aironet 1560, 2800, and 3800 Series Access Points, which stems from a...

CVE-2017-12283: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the handling of 802.11w Protected Management Frames PAF by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device, aka Denial of Service. The vulnerability exists because the affected...

PT-2017-12453

Name of the Vulnerable Software and Affected Versions Cisco IOS Software for Cisco Aironet Access Points affected versions not specified Description A vulnerability in the packet processing code could allow an unauthenticated, adjacent attacker to retrieve content from memory on an affected devic...

PT-2017-12457

Name of the Vulnerable Software and Affected Versions Cisco Aironet 3800 Series Access Points affected versions not specified Description A vulnerability exists in the handling of 802.11w Protected Management Frames PAF that could allow an unauthenticated, adjacent attacker to terminate a valid...

PT-2017-12448

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1560 Series Access Points Cisco Aironet 2800 Series Access Points Cisco Aironet 3800 Series Access Points Description A vulnerability in 802.11 association request frame processing could allow an unauthenticated, Layer 2 radio...

PT-2017-12455

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1800, 2800, and 3800 Series Access Points affected versions not specified Description A vulnerability in the implementation of Protected Extensible Authentication Protocol PEAP functionality for standalone configurations could...

PT-2017-12449

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1560 Series Access Points Cisco Aironet 2800 Series Access Points Cisco Aironet 3800 Series Access Points Description A vulnerability in Extensible Authentication Protocol EAP ingress frame processing could allow an...

CVE-2017-12273: Improper Input Validation

A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service DoS condition. The...

CVE-2017-12279: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the packet processing code of Cisco IOS Software for Cisco Aironet Access Points could allow an unauthenticated, adjacent attacker to retrieve content from memory on an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to...

CVE-2017-12274: Improper Input Validation

A vulnerability in Extensible Authentication Protocol EAP ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service...

CVE-2017-12281: Improper Authentication

A vulnerability in the implementation of Protected Extensible Authentication Protocol PEAP functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected...

Cisco Aironet Access Points Protected Management Frames User Denial of Service Vulnerability

A vulnerability in the handling of 802.11w Protected Management Frames PAF by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might...

Cisco Aironet Access Points MAC Authentication Bypass Vulnerability

A vulnerability in the implementation of Protected Extensible Authentication Protocol PEAP functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected...

Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms Extensible Authentication Protocol Denial of Service Vulnerability

A vulnerability in Extensible Authentication Protocol EAP ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service...

Cisco Aironet 3800 Series Access Points Protected Management Frames User Denial of Service Vulnerability

A vulnerability in the handling of 802.11w Protected Management Frames PAF by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device. The vulnerability exists because the affected device does not properl...

Cisco IOS Software for Cisco Aironet Access Points Information Disclosure Vulnerability

A vulnerability in the packet processing code of Cisco IOS Software for Cisco Aironet Access Points could allow an unauthenticated, adjacent attacker to retrieve content from memory on an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to...

Design/Logic Flaw

Wi-Fi Protected Access WPA and WPA2 that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key IGTK during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients...