PT-2021-5174 · Cisco · Cisco Ios Xe Wireless Controller+1
Published
2021-09-22
·
Updated
2022-07-08
·
CVE-2021-1611
CVSS v3.1
8.6
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Cisco IOS XE Wireless Controller Software versions (affected versions not specified)
Description
A vulnerability in Ethernet over GRE (EoGRE) packet processing could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This issue is due to improper processing of malformed EoGRE packets. An attacker could exploit this vulnerability by sending malicious packets to the affected device, potentially causing the device to reload and resulting in a DoS condition.
Recommendations
For Cisco IOS XE Wireless Controller Software, update to a version that includes the fix for this issue, as software updates have been released by Cisco to address this vulnerability.
As a temporary workaround, consider restricting access to the EoGRE packet processing functionality until a patch is available.
Avoid sending malicious packets to the affected device to minimize the risk of exploitation.
At the moment, there is no information about a specific version that contains a fix for this vulnerability, but it is recommended to follow Cisco's security advisory for the most up-to-date information.
Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cisco Ios Xe Wireless Controller
Cisco Ios Xe