Page 2 of 9 results (0.010 seconds)

CVSS: 7.4EPSS: 0%CPEs: 13EXPL: 0

A vulnerability in the 802.11r Fast Transition (FT) implementation for Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected interface. The vulnerability is due to a lack of complete error handling condition for client authentication requests sent to a targeted interface configured for FT. An attacker could exploit this vulnerability by sending crafted authentication request traffic to the targeted interface, causing the device to restart unexpectedly. Una vulnerabilidad en la implementación de 802.11r Fast Transition (FT) para el Software IOS Access Points (APs) de Cisco, podría permitir a un atacante adyacente no autenticado causar una condición de denegación de servicio (DoS) en una interfaz afectada. La vulnerabilidad es debido a la falta de una condición de manejo de errores completo para las peticiones de autenticación de clientes enviadas hacia una interfaz específica configurada para FT. • http://www.securityfocus.com/bid/109312 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-aironet-dos • CWE-20: Improper Input Validation •

CVSS: 7.4EPSS: 0%CPEs: 9EXPL: 0

A vulnerability in the 802.11r Fast Transition feature set of Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a corruption of certain timer mechanisms triggered by specific roaming events. This corruption will eventually cause a timer crash. An attacker could exploit this vulnerability by sending malicious reassociation events multiple times to the same AP in a short period of time, causing a DoS condition on the affected AP. Una vulnerabilidad en el conjunto de características 802.11r Fast Transition en Cisco IOS Access Points (APs) Software podría permitir que un atacante adyacente sin autenticar provoque una denegación de servicio (DoS) en un dispositivo afectado. • http://www.securityfocus.com/bid/105680 http://www.securitytracker.com/id/1041918 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-ap-ft-dos • CWE-400: Uncontrolled Resource Consumption •

CVSS: 6.8EPSS: 0%CPEs: 8EXPL: 0

A vulnerability in the Cisco Aironet Series Access Points (APs) software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a deadlock condition that may occur when an affected AP attempts to dequeue aggregated traffic that is destined to an attacker-controlled wireless client. An attacker who can successfully transition between multiple Service Set Identifiers (SSIDs) hosted on the same AP while replicating the required traffic patterns could trigger the deadlock condition. A watchdog timer that detects the condition will trigger a reload of the device, resulting in a DoS condition while the device restarts. Una vulnerabilidad en el software de Cisco Aironet Series Access Points (APs) podría permitir que un atacante autenticado adyacente haga que el dispositivo afectado se reinicie inesperadamente y provoque una denegación de servicio (DoS) como consecuencia. • http://www.securityfocus.com/bid/105685 http://www.securitytracker.com/id/1041929 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-aironet-dos • CWE-400: Uncontrolled Resource Consumption CWE-667: Improper Locking •

CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0

Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POST request, aka Bug ID CSCuy01457. Dispositivos Cisco Small Business 500 Wireless Access Point con firmware 1.0.4.4 permite a atacantes remotos establecer la hora del sistema a través de una petición POST manipulada, también conocida como Bug ID CSCuy01457. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160216-wap http://www.securitytracker.com/id/1035036 • CWE-20: Improper Input Validation •