Vulnerability identifier: #VU9097
Vulnerability risk: Low
CVSSv3.1: 5.3 [CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID:
CWE-ID:
CWE-287
Exploitation vector: Local network
Exploit availability: No
Vulnerable software:
Aironet
Hardware solutions /
Firmware
Vendor: Cisco Systems, Inc
Description
The vulnerability allows a Layer 2 radio frequency (RF) adjacent attacker to bypass authentication and connect on the target system.
The weakness exists in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points due to insufficient frame validation of the 802.11 association request. An adjacent attacker can bypass authentication and cause the AP to reload.
Successful exploitation of the vulnerability results in denial of service.
Mitigation
Install update from vendor's website (8.0.152.0, 8.2.164.0, 8.3.132.0, 8.4.100.0).
Vulnerable software versions
Aironet: 1560 Series - 3800 Series
External links
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-aironet1
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.