CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
52.7%
A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper validation of parameters in a Flexible NetFlow Version 9 record. An attacker could exploit this vulnerability by sending a malformed Flexible NetFlow Version 9 packet to the Control and Provisioning of Wireless Access Points (CAPWAP) data port of an affected device. An exploit could allow the attacker to trigger an infinite loop, resulting in a process crash that would cause a reload of the device.
Vendor | Product | Version | CPE |
---|---|---|---|
cisco | ios_xe | 16.10.1 | cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:* |
cisco | ios_xe | 16.10.1a | cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:* |
cisco | ios_xe | 16.10.1b | cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:* |
cisco | ios_xe | 16.10.1e | cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:* |
cisco | ios_xe | 16.10.1s | cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:* |
cisco | ios_xe | 16.10.2 | cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:* |
cisco | ios_xe | 16.11.1 | cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:* |
cisco | ios_xe | 16.11.1a | cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:* |
cisco | ios_xe | 16.11.1b | cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:* |
cisco | ios_xe | 16.11.1c | cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:* |
[
{
"product": "Cisco IOS XE Software 16.10.1",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
52.7%