Lucene search

[email protected]CVE-2021-34740

HistorySep 23, 2021 - 3:15 a.m.

CVE-2021-34740

2021-09-2303:15:19

CWE-401

[email protected]

web.nvd.nist.gov

cve-2021-34740

wlan control protocol

wcp

cisco

aironet

access point

dos

denial of service

nvd

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

7.4 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

25.2%

JSON

A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to incorrect error handling when an affected device receives an unexpected 802.11 frame. An attacker could exploit this vulnerability by sending certain 802.11 frames over the wireless network to an interface on an affected AP. A successful exploit could allow the attacker to cause a packet buffer leak. This could eventually result in buffer allocation failures, which would trigger a reload of the affected device.

Affected configurations

NVD

Node

ciscoaironet_access_point_softwareRange8.10.0–8.10.162.0

ciscoaironet_access_point_softwareMatch17.2

ciscoaironet_access_point_softwareMatch17.3

AND

cisco1100-4g\/6g_integrated_services_routerMatch-

cisco1100-4p_integrated_services_routerMatch-

cisco1100-8p_integrated_services_routerMatch-

cisco1100_integrated_services_routerMatch-

cisco1101-4p_integrated_services_routerMatch-

cisco1101_integrated_services_routerMatch-

cisco1109-2p_integrated_services_routerMatch-

cisco1109-4p_integrated_services_routerMatch-

cisco1109_integrated_services_routerMatch-

cisco1111x-8p_integrated_services_routerMatch-

cisco1111x_integrated_services_routerMatch-

cisco111x_integrated_services_routerMatch-

cisco1120_integrated_services_routerMatch-

cisco1160_integrated_services_routerMatch-

cisco6300_series_access_pointsMatch-

ciscoaironet_1540Match-

ciscoaironet_1542dMatch-

ciscoaironet_1542iMatch-

ciscoaironet_1560Match-

ciscoaironet_1562dMatch-

ciscoaironet_1562eMatch-

ciscoaironet_1562iMatch-

ciscoaironet_1800Match-

ciscoaironet_1800iMatch-

ciscoaironet_1810Match-

ciscoaironet_1810wMatch-

ciscoaironet_1815Match-

ciscoaironet_1815iMatch-

ciscoaironet_1830Match-

ciscoaironet_1830eMatch-

ciscoaironet_1830iMatch-

ciscoaironet_1840Match-

ciscoaironet_1850Match-

ciscoaironet_1850eMatch-

ciscoaironet_1850iMatch-

ciscoaironet_2800Match-

ciscoaironet_2800eMatch-

ciscoaironet_2800iMatch-

ciscoaironet_3800Match-

ciscoaironet_3800eMatch-

ciscoaironet_3800iMatch-

ciscoaironet_3800pMatch-

ciscoaironet_4800Match-

ciscocatalyst_9100Match-

ciscocatalyst_9105Match-

ciscocatalyst_9105axiMatch-

ciscocatalyst_9105axwMatch-

ciscocatalyst_9115Match-

ciscocatalyst_9115_apMatch-

ciscocatalyst_9115axeMatch-

ciscocatalyst_9115axiMatch-

ciscocatalyst_9117Match-

ciscocatalyst_9117_apMatch-

ciscocatalyst_9117axiMatch-

ciscocatalyst_9120Match-

ciscocatalyst_9120_apMatch-

ciscocatalyst_9120axeMatch-

ciscocatalyst_9120axiMatch-

ciscocatalyst_9120axpMatch-

ciscocatalyst_9124Match-

ciscocatalyst_9124axdMatch-

ciscocatalyst_9124axiMatch-

ciscocatalyst_9130Match-

ciscocatalyst_9130_apMatch-

ciscocatalyst_9130axeMatch-

ciscocatalyst_9130axiMatch-

ciscocatalyst_iw6300Match-

ciscocatalyst_iw6300_acMatch-

ciscocatalyst_iw6300_dcMatch-

ciscocatalyst_iw6300_dcwMatch-

CPENameOperatorVersion
cisco:aironet_access_point_softwarecisco aironet access point softwarelt8.10.162.0
cisco:aironet_access_point_softwarecisco aironet access point softwareeq17.2
cisco:aironet_access_point_softwarecisco aironet access point softwareeq17.3

CPE	Name	Operator	Version
cisco:aironet_access_point_software	cisco aironet access point software	lt	8.10.162.0
cisco:aironet_access_point_software	cisco aironet access point software	eq	17.2
cisco:aironet_access_point_software	cisco aironet access point software	eq	17.3

CNA Affected

[
  {
    "product": "Cisco Aironet Access Point Software ",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-wpa-pktleak-dos-uSTyGrL

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

7.4 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

25.2%

JSON

Related for CVE-2021-34740

prion1 cvelist1 nvd1 cisco1