PT-2015-7207 · Cisco · Cisco Aironet 1800

Published 2015-11-14 · Updated 2016-12-07 · CVE-2015-6367

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1800 devices with software version 8.1(131.0)

Description The issue allows remote attackers to cause a denial of service by improperly establishing many SSHv2 connections, resulting in CPU consumption.

Recommendations For Cisco Aironet 1800 devices with software version 8.1(131.0), consider restricting SSHv2 connections to prevent excessive CPU consumption until a patch is available.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-6367

Affected Products

Cisco Aironet 1800

References · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151113-aironet · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6367 · Security Note
• http://securitytracker.com/id/1034157 · Note