Denial of service in Cisco Embedded Wireless Controller Software for Catalyst Access Points
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2021-1615 |
| CWE-ID | N/A |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
Cisco Embedded Wireless Controller Software for Catalyst Access Points Hardware solutions / Routers & switches, VoIP, GSM, etc |
| Vendor | Cisco Systems, Inc |
Security Bulletin
This security bulletin contains one medium risk vulnerability.
1) Insufficient Resource Pool
EUVDB-ID: #VU56843
Risk: Medium
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2021-1615
CWE-ID: N/A
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to cause a denial of service (DoS) condition.
The vulnerability exists due to insufficient buffer allocation in the packet processing functionality. A remote attacker can send a specially crafted traffic and cause a denial of service condition on the target system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco Embedded Wireless Controller Software for Catalyst Access Points: before 16.12.6
CPE2.3 External linksQ & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
