MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2018-0415

CVSS 6.8v3.0pub. 2018-08-15upd. 2024-11-21

A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Series Wireless Access Points could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of certain EAPOL frames. An attacker could exploit this vulnerability by sending a stream of crafted EAPOL frames to an affected device. A successful exploit could allow the attacker to force the access point (AP) to disassociate all the associated stations (STAs) and to disallow future, new association requests. Cisco Bug IDs: CSCvj97472.

CVSS Vector
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

  • Cisco Wap121

    HW
    Cisco
    all versions

  • Cisco Wap121 Firmware

    OS
    Cisco
    ≤ 1.0.6.6

  • Cisco Wap125

    HW
    Cisco
    all versions

  • Cisco Wap125 Firmware

    OS
    Cisco
    ≤ 1.0.6.6

  • Cisco Wap131

    HW
    Cisco
    all versions

  • Cisco Wap131 Firmware

    OS
    Cisco
    ≤ 1.0.6.6

  • Cisco Wap150

    HW
    Cisco
    all versions

  • Cisco Wap150 Firmware

    OS
    Cisco
    ≤ 1.0.6.6

  • Cisco Wap321

    HW
    Cisco
    all versions

  • Cisco Wap321 Firmware

    OS
    Cisco
    ≤ 1.0.6.6

  • Cisco Wap351

    HW
    Cisco
    all versions

  • Cisco Wap351 Firmware

    OS
    Cisco
    ≤ 1.0.6.6

  • Cisco Wap361

    HW
    Cisco
    all versions

  • Cisco Wap361 Firmware

    OS
    Cisco
    ≤ 1.0.6.6

  • Cisco Wap371

    HW
    Cisco
    all versions

  • Cisco Wap371 Firmware

    OS
    Cisco
    ≤ 1.0.6.6
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2021-1401HIGH8.8same product

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 5...

CVE-2021-1400HIGH8.8same product

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 5...

CVE-2020-12695HIGH7.5same product

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subs...

CVE-2024-20335MEDIUM6.5same product

A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireles...

CVE-2024-20336MEDIUM6.5same product

A vulnerability in the web-based user interface of Cisco Small Business 100, 300, and 500 Series Wireless APs ...