Authentication bypass in Aironet - CVE-2017-12273
Published: November 2, 2017
Vulnerability identifier: #VU9097
CSH Severity: Low
CVSS v4: 6 [CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-12273
CWE-ID: CWE-287
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a Layer 2 radio frequency (RF) adjacent attacker to bypass authentication and connect on the target system.
The weakness exists in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points due to insufficient frame validation of the 802.11 association request. An adjacent attacker can bypass authentication and cause the AP to reload.
Successful exploitation of the vulnerability results in denial of service.
The weakness exists in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points due to insufficient frame validation of the 802.11 association request. An adjacent attacker can bypass authentication and cause the AP to reload.
Successful exploitation of the vulnerability results in denial of service.
Affected software
Aironet
How to mitigate CVE-2017-12273
Install update from vendor's website (8.0.152.0, 8.2.164.0, 8.3.132.0, 8.4.100.0).