Description
A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to insufficient input validation of certain IPv4 packets. An attacker could exploit this vulnerability by sending a crafted IPv4 packet either to or through an affected device. A successful exploit could allow the attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To successfully exploit this vulnerability, the attacker does not need to be associated with the affected AP. This vulnerability cannot be exploited by sending IPv6 packets.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cisco | Cisco Aironet Access Point Software | 8.2.100.0, 8.2.130.0, 8.2.111.0, 8.2.110.0, 8.2.121.0, 8.2.141.0, 8.2.151.0, 8.2.160.0, 8.2.161.0, 8.2.164.0, 8.2.166.0, 8.2.170.0, 8.2.163.0, 8.3.102.0, 8.3.111.0, 8.3.112.0, 8.3.121.0, 8.3.122.0, 8.3.130.0, 8.3.131.0, 8.3.132.0, 8.3.133.0, 8.3.140.0, 8.3.141.0, 8.3.143.0, 8.3.150.0, 8.3.108.0, 8.… | — |
| Cisco | Cisco Business Wireless Access Point Software | 10.0.1.0, 10.0.2.0, 10.1.1.0, 10.1.2.0, 10.2.1.0, 10.2.2.0, 10.3.1.0, 10.3.1.1, 10.3.2.0, 1.0.0.13, 1.0.0.16, 1.0.0.3, 1.0.0.39, 1.0.0.4, 1.0.0.5, 1.0.0.7, 1.0.1.2, 1.0.1.3, 1.0.1.4, 1.0.1.5, 1.0.1.6, 1.0.1.7, 1.0.2.0, 1.0.2.13, 1.0.2.14, 1.0.2.15, 1.0.2.16, 1.0.2.17, 1.0.2.2, 1.0.2.8, 1.0.3.1, 1.0… | — |
| Cisco | Cisco Aironet Access Point Software (IOS XE Controller) | 16.10.1e, 16.10.1, 17.1.1t, 17.1.1s, 17.1.1, 16.11.1a, 16.11.1, 16.11.1c, 16.11.1b, 16.12.1s, 16.12.4, 16.12.1, 16.12.2s, 16.12.1t, 16.12.4a, 16.12.5, 16.12.3, 16.12.6, 16.12.8, 16.12.7, 16.12.6a, 17.3.1, 17.3.2a, 17.3.3, 17.3.4, 17.3.5, 17.3.2, 17.3.4c, 17.3.5a, 17.3.5b, 17.3.6, 17.2.1, 17.2.1a, 1… | — |
Advisories 1
- WID-SEC-2024-0744 Cisco Aironet Access Point: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 27, 2024