17.3

CVSS 7.4 - HIGH

Attack vector

ADJACENT_NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

low complexity

cisco

CWE-401

NVD

Published: 2021-09-23

Updated: 2023-11-07

Summary

A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to incorrect error handling when an affected device receives an unexpected 802.11 frame. An attacker could exploit this vulnerability by sending certain 802.11 frames over the wireless network to an interface on an affected AP. A successful exploit could allow the attacker to cause a packet buffer leak. This could eventually result in buffer allocation failures, which would trigger a reload of the affected device.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco Aironet Access Point Software * Cisco Aironet Access Point Software 17.2 Cisco Aironet Access Point Software 17.3	3
Hardware	Cisco Cisco 1100 4G/6G Integrated Services Router - Cisco 1100 4P Integrated Services Router - Cisco 1100 8P Integrated Services Router - Cisco 1100 Integrated Services Router - Cisco 1101 4P Integrated Services Router - Cisco 1101 Integrated Services Router - Cisco 1109 2P Integrated Services Router - Cisco 1109 4P Integrated Services Router - Cisco 1109 Integrated Services Router - Cisco 1111X 8P Integrated Services Router - Cisco 1111X Integrated Services Router - Cisco 111X Integrated Services Router - Cisco 1120 Integrated Services Router - Cisco 1160 Integrated Services Router - Cisco 6300 Series Access Points - Cisco Aironet 1540 - Cisco Aironet 1542D - Cisco Aironet 1542I - Cisco Aironet 1560 - Cisco Aironet 1562D - Cisco Aironet 1562E - Cisco Aironet 1562I - Cisco Aironet 1800 - Cisco Aironet 1800I - Cisco Aironet 1810 - Cisco Aironet 1810W - Cisco Aironet 1815 - Cisco Aironet 1815I - Cisco Aironet 1830 - Cisco Aironet 1830E - Cisco Aironet 1830I - Cisco Aironet 1840 - Cisco Aironet 1850 - Cisco Aironet 1850E - Cisco Aironet 1850I - Cisco Aironet 2800 - Cisco Aironet 2800E - Cisco Aironet 2800I - Cisco Aironet 3800 - Cisco Aironet 3800E - Cisco Aironet 3800I - Cisco Aironet 3800P - Cisco Aironet 4800 - Cisco Catalyst 9100 - Cisco Catalyst 9105 - Cisco Catalyst 9105Axi - Cisco Catalyst 9105Axw - Cisco Catalyst 9115 - Cisco Catalyst 9115 AP - Cisco Catalyst 9115Axe - Cisco Catalyst 9115Axi - Cisco Catalyst 9117 - Cisco Catalyst 9117 AP - Cisco Catalyst 9117Axi - Cisco Catalyst 9120 - Cisco Catalyst 9120 AP - Cisco Catalyst 9120Axe - Cisco Catalyst 9120Axi - Cisco Catalyst 9120Axp - Cisco Catalyst 9124 - Cisco Catalyst 9124Axd - Cisco Catalyst 9124Axi - Cisco Catalyst 9130 - Cisco Catalyst 9130 AP - Cisco Catalyst 9130Axe - Cisco Catalyst 9130Axi - Cisco Catalyst Iw6300 - Cisco Catalyst Iw6300 AC - Cisco Catalyst Iw6300 DC - Cisco Catalyst Iw6300 DCW -	70

Common Weakness Enumeration (CWE)

CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-wpa-pktleak-dos-uSTyGrL