SB2018101816 - Denial of service in Cisco Aironet

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2018101816

SB2018101816 - Denial of service in Cisco Aironet

Published: October 18, 2018

Security Bulletin ID SB2018101816
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Adjecent network
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Denial of service (CVE-ID: CVE-2018-0381)

The vulnerability allows an adjacent authenticated attacker to cause DoS condition on the target system.

The vulnerability exists in the Cisco Aironet 1560, 1800, 2800, and 3800 Series Access Points (APs) software due to a deadlock condition that may occur when an affected AP attempts to dequeue aggregated traffic that is destined to an attacker-controlled wireless client. An adjacent attacker who can successfully transition between multiple Service Set Identifiers (SSIDs) hosted on the same AP while replicating the required traffic patterns can trigger the deadlock condition and cause watchdog timer that detects the condition to reload of the device.


Remediation

Install update from vendor's website.

References