CVE-2006-0354
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:L/Au:S/C:N/I:N/A:C
AI Score
Confidence
High
EPSS
Percentile
85.8%
Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections) by sending the management interface a large number of spoofed ARP packets, which creates a large ARP table that exhausts memory, aka Bug ID CSCsc16644.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | aironet_ap1100 | * | cpe:2.3:h:cisco:aironet_ap1100:*:*:*:*:*:*:*:* |
| cisco | aironet_ap1130ag | * | cpe:2.3:h:cisco:aironet_ap1130ag:*:*:*:*:*:*:*:* |
| cisco | aironet_ap1200 | * | cpe:2.3:h:cisco:aironet_ap1200:*:*:*:*:*:*:*:* |
| cisco | aironet_ap1230ag | * | cpe:2.3:h:cisco:aironet_ap1230ag:*:*:*:*:*:*:*:* |
| cisco | aironet_ap1240ag | * | cpe:2.3:h:cisco:aironet_ap1240ag:*:*:*:*:*:*:*:* |
| cisco | aironet_ap1300 | * | cpe:2.3:h:cisco:aironet_ap1300:*:*:*:*:*:*:*:* |
| cisco | aironet_ap1400 | * | cpe:2.3:h:cisco:aironet_ap1400:*:*:*:*:*:*:*:* |
| cisco | aironet_ap350 | * | cpe:2.3:h:cisco:aironet_ap350:*:*:*:*:*:*:*:* |
References
secunia.com/advisories/18430
securityreason.com/securityalert/339
securitytracker.com/id?1015483
www.cisco.com/warp/public/707/cisco-sa-20060112-wireless.shtml
www.osvdb.org/22375
www.securityfocus.com/bid/16217
www.vupen.com/english/advisories/2006/0176
exchange.xforce.ibmcloud.com/vulnerabilities/24086
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5680
Related
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:L/Au:S/C:N/I:N/A:C
AI Score
Confidence
High
EPSS
Percentile
85.8%