PT-2001-1392 · Cisco · Cisco 340-Series Aironet Access Point

Published 2001-01-01 · Updated 2008-09-05 · CVE-2001-0161

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Cisco 340-series Aironet access point version 11.01

Description: The issue concerns the use of WEP encryption in the affected device. Specifically, it does not utilize 6 of the 24 available IV bits for WEP encryption. This oversight makes it easier for remote attackers to mount brute force attacks.

Recommendations: For version 11.01, consider updating the firmware to a version that properly utilizes all available IV bits for WEP encryption to prevent brute force attacks.

Exploit

Fix

Related Identifiers

CVE-2001-0161

Affected Products

Cisco 340-Series Aironet Access Point

References · 2

• 🔥 http://cs.jhu.edu/~seny/pubs/wince802.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0161 · Security Note