cisco ios xe, cisco business access points, cisco wireless lan controller software
CVSS 8.6 · High EPSS 0,63%
Kerentanan Improper Input Validation pada cisco ios xe, cisco business access points +1 lainnya. Skor CVSS 3.1 8.6 (High) menurut NVD.
A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of certain IPv4 packets. An attacker could exploit this vulnerability by sending a crafted IPv4 packet either to or through an affected device. A successful exploit could allow the attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To successfully exploit this vulnerability, the attacker does not need to be associated with the affected AP. This vulnerability cannot be exploited by sending IPv6 packets.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| cisco | ios xe | Semua versi sebelum 17.3.8 |
| cisco | ios xe | Versi 17.4 hingga sebelum 17.6.6 |
| cisco | ios xe | Versi 17.7 hingga sebelum 17.9.5 |
| cisco | ios xe | Versi 17.10 hingga sebelum 17.12.2 |
| cisco | business access points | Semua versi sebelum 10.9.1.0 |
| cisco | business access points | Semua versi sebelum 10.6.2.0 |
| cisco | wireless lan controller software | Semua versi sebelum 8.10.190.0 |