HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2021-1615

CVSS 8.6v3.1pub. 2021-09-23upd. 2024-11-21

A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller (EWC) Software for Catalyst Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected AP. This vulnerability is due to insufficient buffer allocation. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to exhaust available resources and cause a DoS condition on an affected AP, as well as a DoS condition for client traffic traversing the AP.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

  • Cisco Catalyst 9105

    HW
    Cisco
    all versions

  • Cisco Catalyst 9115

    HW
    Cisco
    all versions

  • Cisco Catalyst 9117

    HW
    Cisco
    all versions

  • Cisco Catalyst 9120

    HW
    Cisco
    all versions

  • Cisco Catalyst 9124

    HW
    Cisco
    all versions

  • Cisco Catalyst 9130

    HW
    Cisco
    all versions

  • Cisco Embedded Wireless Controller

    APP
    Cisco
    ≤ 17.6.1
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2024-20259HIGH8.6same product

A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote a...

CVE-2023-20112HIGH7.4same product

A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause...

CVE-2022-20855HIGH7.9same product

A vulnerability in the self-healing functionality of Cisco IOS XE Software for Embedded Wireless Controllers o...

CVE-2021-1565HIGH8.6same product

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processin...

CVE-2021-34740HIGH7.4same product

A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software...