CVE-2006-0354

Cisco Aironet Wireless Access Points - Memory Exhaustion ARP (Denial of Service)

Severity Score

5.5

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections) by sending the management interface a large number of spoofed ARP packets, which creates a large ARP table that exhausts memory, aka Bug ID CSCsc16644.

*Credits: N/A

CVSS Scores

NISTv2 5.5

Attack Vector

Adjacent

Attack Complexity

Low

Authentication

Single

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-01-22 CVE Reserved
2006-01-22 CVE Published
2006-01-25 First Exploit
2023-04-28 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-399: Resource Management Errors

CAPEC

References (10)

URL	Tag	Source
http://securityreason.com/securityalert/339	Third Party Advisory
http://www.osvdb.org/22375	Vdb Entry
http://www.securityfocus.com/bid/16217	Vdb Entry
http://www.vupen.com/english/advisories/2006/0176	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/24086	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5680	Signature

URL	Date	SRC
https://www.exploit-db.com/exploits/1447	2006-01-25
http://www.cisco.com/warp/public/707/cisco-sa-20060112-wireless.shtml	2024-08-07

URL	Date	SRC
http://secunia.com/advisories/18430	2017-10-11
http://securitytracker.com/id?1015483	2017-10-11

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"		Aironet Ap1100 Search vendor "Cisco" for product "Aironet Ap1100"				*		-		Affected
Cisco Search vendor "Cisco"		Aironet Ap1130ag Search vendor "Cisco" for product "Aironet Ap1130ag"				*		-		Affected
Cisco Search vendor "Cisco"		Aironet Ap1200 Search vendor "Cisco" for product "Aironet Ap1200"				*		-		Affected
Cisco Search vendor "Cisco"		Aironet Ap1230ag Search vendor "Cisco" for product "Aironet Ap1230ag"				*		-		Affected
Cisco Search vendor "Cisco"		Aironet Ap1240ag Search vendor "Cisco" for product "Aironet Ap1240ag"				*		-		Affected
Cisco Search vendor "Cisco"		Aironet Ap1300 Search vendor "Cisco" for product "Aironet Ap1300"				*		-		Affected
Cisco Search vendor "Cisco"		Aironet Ap1400 Search vendor "Cisco" for product "Aironet Ap1400"				*		-		Affected
Cisco Search vendor "Cisco"		Aironet Ap350 Search vendor "Cisco" for product "Aironet Ap350"				*		-		Affected