A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of certain IPv4 packets. An attacker could exploit this vulnerability by sending a crafted IPv4 packet either to or through an affected device. A successful exploit could allow the attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To successfully exploit this vulnerability, the attacker does not need to be associated with the affected AP. This vulnerability cannot be exploited by sending IPv6 packets.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HCisco Business 140ac
HWCiscowszystkie wersjeCisco Business 140ac Access Point
HWCiscowszystkie wersjeCisco Business 141acm
HWCiscowszystkie wersjeCisco Business 142acm
HWCiscowszystkie wersjeCisco Business 143acm
HWCiscowszystkie wersjeCisco Business 145ac
HWCiscowszystkie wersjeCisco Business 145ac Access Point
HWCiscowszystkie wersjeCisco Business 150ax
HWCiscowszystkie wersjeCisco Business 150ax Access Point
HWCiscowszystkie wersjeCisco Business 151axm
HWCiscowszystkie wersjeCisco Business 240ac
HWCiscowszystkie wersjeCisco Business Access Points
APPCisco< 10.9.1.0< 10.6.2.0Cisco IOS XE
OSCisco< 17.3.817.4 – 17.6.6 (bez)17.7 – 17.9.5 (bez)17.10 – 17.12.2 (bez)Cisco Wireless Lan Controller Software
OSCisco< 8.10.190.0
Powiązane podatności
Cisco IOS XE Web UI — nieautoryzowane tworzenie konta z privilege 15
Buffer overflow w QoS Cisco IOS/IOS XE — RCE i DoS przez UDP 18999
RCE w Cisco IOS/IOS XE – podatność protokołu CMP przez Telnet
Nieprawidłowa kontrola dostępu w Cisco IOS XE Software (CVE-2026-20267)
Cisco IOS XE — improper neutralization of special elements (CWE-74)