CVSS: 5.3EPSS: 0%CPEs: 16EXPL: 0CVE-2018-0412
https://notcve.org/view.php?id=CVE-2018-0412
15 Aug 2018 — A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Series Wireless Access Points could allow an unauthenticated, adjacent attacker to force the downgrade of the encryption algorithm that is used between an authenticator (access point) and a supplicant (Wi-Fi client). The vulnerability is due to the improper processing of certain EAPOL messages that are received durin... • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-sb-wap-encrypt • CWE-310: Cryptographic Issues •
CVSS: 6.8EPSS: 0%CPEs: 16EXPL: 0CVE-2018-0415
https://notcve.org/view.php?id=CVE-2018-0415
15 Aug 2018 — A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Series Wireless Access Points could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of certain EAPOL frames. An attacker could exploit this vulnerability by sending a stream of crafted EAPOL frames to an ... • http://www.securityfocus.com/bid/105116 • CWE-388: 7PK - Errors •