PT-2018-1745 · Cisco · Cisco Aironet Access Points
Publicado
2018-10-17
·
Atualizado
2021-09-13
·
CVE-2018-0381
CVSS v3.1
6.8
Média
| Vetor | AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Cisco Aironet Access Points (AP) versions 1560, 1800, 2800, and 3800
Description
The issue is caused by errors in traffic processing, which could allow a remote attacker to cause a denial of service (DoS) condition. This can occur when an affected AP attempts to dequeue aggregated traffic destined to an attacker-controlled wireless client, potentially leading to a deadlock condition. An attacker who can transition between multiple Service Set Identifiers (SSIDs) hosted on the same AP while replicating the required traffic patterns could trigger this condition. A watchdog timer that detects the condition will trigger a reload of the device, resulting in a DoS condition while the device restarts.
Recommendations
For Cisco Aironet Access Points (AP) versions 1560, 1800, 2800, and 3800, consider disabling the functionality that allows transitioning between multiple Service Set Identifiers (SSIDs) hosted on the same AP as a temporary workaround until a patch is available. Restrict access to the affected APs to minimize the risk of exploitation. Avoid replicating the required traffic patterns that could trigger the deadlock condition until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Resource Exhaustion
Improper Locking
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Cisco Aironet Access Points