Към съдържанието
Търсене

CVE-2024-20271: Cisco Aironet Access Point Software, невалидиран вход

8.6

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of certain IPv4 packets. An attacker could exploit this vulnerability by sending a crafted IPv4 packet either to or through an affected device. A successful exploit could allow the attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To successfully exploit this vulnerability, the attacker does not need to be associated with the affected AP. This vulnerability cannot be exploited by sending IPv6 packets.

Засегнати продукти

  • Cisco Cisco Aironet Access Point Software: 8.2.100.0; 8.2.130.0; 8.2.111.0; 8.2.110.0; 8.2.121.0; 8.2.141.0; 8.2.151.0; 8.2.160.0; 8.2.161.0; 8.2.164.0; 8.2.166.0; 8.2.170.0; 8.2.163.0; 8.3.102.0; 8.3.111.0; 8.3.112.0; 8.3.121.0; 8.3.122.0; 8.3.130.0; 8.3.131.0; 8.3.132.0; 8.3.133.0; 8.3.140.0; 8.3.141.0; 8.3.143.0; 8.3.150.0; 8.3.108.0; 8.3.90.53; 8.3.104.46; 8.3.200.200; 8.3.104.64; 8.3.15.165; 8.3.90.11; 8.3.135.0; 8.3.104.14; 8.3.90.36; 8.3.15.142; 8.3.104.37; 8.3.15.117; 8.3.15.120; 8.3.15.25; 8.3.15.158; 8.3.15.118; 8.3.90.25; 8.3.15.169; 8.3.90.58; 8.4.100.0; 8.4.1.199; 8.4.1.91; 8.4.1.142; 8.4.1.175; 8.4.1.218; 8.4.1.92; 8.5.103.0; 8.5.105.0; 8.5.110.0; 8.5.120.0; 8.5.131.0; 8.5.140.0; 8.5.135.0; 8.5.151.0; 8.5.101.0; 8.5.102.0; 8.5.161.0; 8.5.160.0; 8.5.100.0; 8.5.171.0; 8.5.164.0; 8.5.182.0; 8.5.182.11 ME; 8.7.102.0; 8.7.106.0; 8.7.1.16; 8.8.100.0; 8.8.111.0; 8.8.120.0; 8.8.125.0; 8.8.130.0; 8.6.101.0; 8.6.1.84; 8.6.1.70; 8.6.1.71; 8.9.100.0; 8.9.111.0; 8.10.105.0; 8.10.111.0; 8.10.130.0; 8.10.112.0; 8.10.122.0; 8.10.113.0; 8.10.121.0; 8.10.141.0; 8.10.142.0; 8.10.151.0; 8.10.150.0; 8.10.171.0; 8.10.181.0; 8.10.182.0; 8.10.161.0; 8.10.170.0; 8.10.183.0; 8.10.162.0; 8.10.185.0
  • Cisco Cisco Business Wireless Access Point Software: 10.0.1.0; 10.0.2.0; 10.1.1.0; 10.1.2.0; 10.2.1.0; 10.2.2.0; 10.3.1.0; 10.3.1.1; 10.3.2.0; 1.0.0.13; 1.0.0.16; 1.0.0.3; 1.0.0.39; 1.0.0.4; 1.0.0.5; 1.0.0.7; 1.0.1.2; 1.0.1.3; 1.0.1.4; 1.0.1.5; 1.0.1.6; 1.0.1.7; 1.0.2.0; 1.0.2.13; 1.0.2.14; 1.0.2.15; 1.0.2.16; 1.0.2.17; 1.0.2.2; 1.0.2.8; 1.0.3.1; 1.0.4.4; 1.0.4.3; 1.0.6.6; 1.0.3.4; 1.0.6.8; 1.0.6.2; 1.0.2.3; 1.0.5.3; 1.0.1.10; 1.0.4.2; 1.0.6.5; 1.0.6.7; 1.0.5.0; 1.0.0.10; 1.0.0.12; 1.0.0.14; 1.0.0.15; 1.0.0.17; 1.0.0.9; 1.0.1.11; 1.0.1.12; 1.0.1.9; 1.0.2.6; 1.1.0.5; 1.1.0.7; 1.1.0.9; 1.1.1.0; 1.1.2.4; 1.1.4.6; 1.1.3.2; 1.1.4.0; 1.1.0.3; 1.1.0.4; 1.1.0.6; 1.1.2.3; 10.4.1.0; 10.4.2.0; 10.6.1.0; 10.7.1.0; 10.8.1.0; 1.2.0.2; 1.2.0.3; 1.2.1.3; 1.3.0.3; 1.3.0.4; 1.3.0.6; 1.3.0.7; 10.5.2.0
  • Cisco Cisco Aironet Access Point Software (IOS XE Controller): 16.10.1e; 16.10.1; 17.1.1t; 17.1.1s; 17.1.1; 16.11.1a; 16.11.1; 16.11.1c; 16.11.1b; 16.12.1s; 16.12.4; 16.12.1; 16.12.2s; 16.12.1t; 16.12.4a; 16.12.5; 16.12.3; 16.12.6; 16.12.8; 16.12.7; 16.12.6a; 17.3.1; 17.3.2a; 17.3.3; 17.3.4; 17.3.5; 17.3.2; 17.3.4c; 17.3.5a; 17.3.5b; 17.3.6; 17.2.1; 17.2.1a; 17.2.3; 17.2.2; 17.5.1; 17.4.1; 17.4.2; 17.6.1; 17.6.2; 17.6.3; 17.6.4; 17.6.5; 17.10.1; 17.9.1; 17.9.2; 17.9.3; 17.9.4; 17.9.4a; 17.7.1; 17.8.1; 17.11.1; 17.12.1
  • cisco aironet_access_point_software: 8.10.111.0; 8.10.112.0; 8.10.113.0; 8.10.121.0; 8.10.122.0; 8.10.130.0; 8.10.141.0; 8.10.142.0; 8.10.150.0; 8.10.151.0; 8.10.161.0; 8.10.162.0; 8.10.170.0; 8.10.171.0; 8.10.181.0; 8.10.182.0; 8.10.183.0; 8.10.185.0; 8.2\(100.0\); 8.2.110.0; 8.2.111.0; 8.2.121.0; 8.2\(130.0\); 8.2.141.0; 8.2.151.0; 8.2.160.0; 8.2.161.0; 8.2.163.0; 8.2.164.0; 8.2.166.0; 8.2.170.0; 8.3.102.0; 8.3.104.14; 8.3.104.37; 8.3.104.46; 8.3.104.64; 8.3.108.0; 8.3.111.0; 8.3.112.0; 8.3.121.0; 8.3.122.0; 8.3.130.0; 8.3.131.0; 8.3.132.0; 8.3.133.0; 8.3.135.0; 8.3.140.0; 8.3.141.0; 8.3.143.0; 8.3.150.0; 8.3.15.117; 8.3.15.118; 8.3.15.120; 8.3.15.142; 8.3.15.158; 8.3.15.165; 8.3.15.169; 8.3.15.25; 8.3.200.200; 8.3.90.11; 8.3.90.25; 8.3.90.36; 8.3.90.53; 8.3.90.58; 8.4.100.0; 8.4.1.142; 8.4.1.175; 8.4.1.199; 8.4.1.218; 8.4.1.91; 8.4.1.92; 8.5.100.0; 8.5.101.0; 8.5.102.0; 8.5.103.0; 8.5.105.0; 8.5.110.0; 8.5.120.0; 8.5.131.0; 8.5.135.0; 8.5.140.0; 8.5.151.0; 8.5.160.0; 8.5.161.0; 8.5.164.0; 8.5.171.0; 8.5.182.0; 8.6.101.0; 8.6.1.70; 8.6.1.71; 8.6.1.84; 8.7.102.0; 8.7.106.0; 8.7.1.16; 8.8.100.0; 8.8.111.0; 8.8.120.0; 8.8.125.0; 8.8.130.0; 8.9.100.0; 8.9.111.0

Вид слабост

История

  • 27 март 2024 Публикувано

Други уязвимости в Cisco Cisco Aironet Access Point Software

Първоизточници

CVE-2024-20271: Cisco Aironet Access Point Software, невалидиран вход | freedomonline.bg