Vulnerability identifier: #VU9098

Vulnerability risk: Low

CVSSv3.1: 5.3 [CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2017-12274

CWE-ID: CWE-287

Exploitation vector: Local network

Exploit availability: No

Vulnerable software:
Aironet
Hardware solutions / Firmware

Vendor: Cisco Systems, Inc

Description
The vulnerability allows a Layer 2 radio frequency (RF) adjacent attacker to cause DoS condition on the target system.

The weakness exists in Extensible Authentication Protocol (EAP) ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points due to insufficient validation of the EAP frame. A remote attacker can send a malformed EAP frame and cause the AP to reload.

Successful exploitation of the vulnerability results in denial of service.

Mitigation
Install update from vendor's website (8.0.152.0, 8.2.164.0, 8.3.132.0, 8.4.100.0).

Vulnerable software versions

Aironet: 1560 Series - 3800 Series

---

External links
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-aironet2

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.