Vulnerabilities > CVE-2021-1565 - Double Free vulnerability in Cisco products

CVSS 8.6 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

cisco

CWE-415

NVD

Published: 2021-09-23

Updated: 2023-11-07

Summary

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. These vulnerabilities are due to insufficient validation of CAPWAP packets. An attacker could exploit the vulnerabilities by sending a malformed CAPWAP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS XE 17.4.1 Cisco IOS XE 3.15.2Xbs Cisco IOS XE 3.15.1Xbs Cisco IOS XE 17.3.1 Cisco IOS XE 17.3.2 Cisco IOS XE 17.5.1 Cisco Catalyst 9800 Firmware 17.3 Cisco Catalyst 9800 Firmware 17.5.1	8
Application	Cisco Cisco Embedded Wireless Controller *	1
Hardware	Cisco Cisco Catalyst 9300 24P A - Cisco Catalyst 9300 24P E - Cisco Catalyst 9300 24S A - Cisco Catalyst 9300 24S E - Cisco Catalyst 9300 24T A - Cisco Catalyst 9300 24T E - Cisco Catalyst 9300 24U A - Cisco Catalyst 9300 24U E - Cisco Catalyst 9300 24Ux A - Cisco Catalyst 9300 24Ux E - Cisco Catalyst 9300 48P A - Cisco Catalyst 9300 48P E - Cisco Catalyst 9300 48S A - Cisco Catalyst 9300 48S E - Cisco Catalyst 9300 48T A - Cisco Catalyst 9300 48T E - Cisco Catalyst 9300 48U A - Cisco Catalyst 9300 48U E - Cisco Catalyst 9300 48Un A - Cisco Catalyst 9300 48Un E - Cisco Catalyst 9300 48Uxm A - Cisco Catalyst 9300 48Uxm E - Cisco Catalyst 9300L - Cisco Catalyst 9300L 24P 4G A - Cisco Catalyst 9300L 24P 4G E - Cisco Catalyst 9300L 24P 4X A - Cisco Catalyst 9300L 24P 4X E - Cisco Catalyst 9300L 24T 4G A - Cisco Catalyst 9300L 24T 4G E - Cisco Catalyst 9300L 24T 4X A - Cisco Catalyst 9300L 24T 4X E - Cisco Catalyst 9300L 48P 4G A - Cisco Catalyst 9300L 48P 4G E - Cisco Catalyst 9300L 48P 4X A - Cisco Catalyst 9300L 48P 4X E - Cisco Catalyst 9300L 48T 4G A - Cisco Catalyst 9300L 48T 4G E - Cisco Catalyst 9300L 48T 4X A - Cisco Catalyst 9300L 48T 4X E - Cisco Catalyst 9300L Stack - Cisco Catalyst 9400 - Cisco Catalyst 9400 Supervisor Engine 1 - Cisco Catalyst 9407R - Cisco Catalyst 9410R - Cisco Catalyst 9500 - Cisco Catalyst 9800 40 - Cisco Catalyst 9800 80 - Cisco Catalyst 9800 CL - Cisco Catalyst 9800 L - Cisco Catalyst 9800 L C - Cisco Catalyst 9800 L F -	51

Common Weakness Enumeration (CWE)

CWE-415 - Double Free

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-capwap-dos-gmNjdKOY