PT-2019-1989 · Cisco · Cisco Aironet Series Access Points

Published 2019-04-17 · Updated 2019-10-09 · CVE-2019-1826

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Aironet Series Access Points versions 1560, 2800, 3800, 4800

Description A vulnerability in the quality of service (QoS) feature could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The issue is due to improper input validation on QoS fields within Wi-Fi frames by the affected device. An attacker could exploit this by sending malformed Wi-Fi frames to an affected device, potentially causing the device to crash and resulting in a DoS condition.

Recommendations For Cisco Aironet Series Access Points versions 1560, 2800, 3800, 4800, consider disabling the QoS feature as a temporary workaround until a patch is available. Restrict access to the affected devices to minimize the risk of exploitation. Avoid using the affected devices in sensitive environments until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Improper Resource Release

Weakness Enumeration

CWE-20

CWE-404

Related Identifiers

BDU:2019-01682

CVE-2019-1826

Affected Products

Cisco Aironet Series Access Points

References · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-aap-dos · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-1826 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1826 · Security Note
• https://bdu.fstec.ru/vul/2019-01682 · Security Note
• https://vuldb.com/?id.133807 · Note
• http://securityfocus.com/bid/107988 · Note