CVE-2019-15264

Cisco Aironet Access Points and Catalyst 9100 Access Points CAPWAP Denial of Service Vulnerability

Severity Score

6.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol implementation of Cisco Aironet and Catalyst 9100 Access Points (APs) could allow an unauthenticated, adjacent attacker to cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to improper resource management during CAPWAP message processing. An attacker could exploit this vulnerability by sending a high volume of legitimate wireless management frames within a short time to an affected device. A successful exploit could allow the attacker to cause a device to restart unexpectedly, resulting in a DoS condition for clients associated with the AP.

Una vulnerabilidad en la implementación del protocolo Control and Provisioning of Wireless Access Points (CAPWAP) de Cisco Aironet and Catalyst 9100 Access Points (APs), podría permitir a un atacante adyacente no autenticado causar que un dispositivo afectado se reinicie inesperadamente, resultando en una condición de denegación de servicio ( DoS). La vulnerabilidad es debido a una gestión de recursos inapropiada durante el procesamiento de mensajes en protocolo CAPWAP. Un atacante podría explotar esta vulnerabilidad mediante el envío de un gran volumen de tramas legítimas de administración inalámbrica en poco tiempo a un dispositivo afectado. Una explotación con éxito podría permitir al atacante causar que un dispositivo se reinicie inesperadamente, resultando en una condición DoS para los clientes asociados con el AP.

*Credits: N/A

CVSS Scores

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Adjacent

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2019-08-20 CVE Reserved
2019-10-16 CVE Published
2023-03-08 EPSS Updated
2024-11-21 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-400: Uncontrolled Resource Consumption

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-airo-capwap-dos	2019-10-22

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"	Aironet 1540 Firmware Search vendor "Cisco" for product "Aironet 1540 Firmware"	-	-	Affected	in	Cisco Search vendor "Cisco"	Aironet 1540 Search vendor "Cisco" for product "Aironet 1540"	-	-	Safe
Cisco Search vendor "Cisco"	Aironet 1560 Firmware Search vendor "Cisco" for product "Aironet 1560 Firmware"	-	-	Affected	in	Cisco Search vendor "Cisco"	Aironet 1560 Search vendor "Cisco" for product "Aironet 1560"	-	-	Safe
Cisco Search vendor "Cisco"	Aironet 1850 Firmware Search vendor "Cisco" for product "Aironet 1850 Firmware"	-	-	Affected	in	Cisco Search vendor "Cisco"	Aironet 1800 Search vendor "Cisco" for product "Aironet 1800"	-	-	Safe
Cisco Search vendor "Cisco"	Aironet 1850 Firmware Search vendor "Cisco" for product "Aironet 1850 Firmware"	8.9\(1.249\) Search vendor "Cisco" for product "Aironet 1850 Firmware" and version "8.9\(1.249\)"	-	Affected	in	Cisco Search vendor "Cisco"	Aironet 1800 Search vendor "Cisco" for product "Aironet 1800"	-	-	Safe
Cisco Search vendor "Cisco"	Aironet 1850 Firmware Search vendor "Cisco" for product "Aironet 1850 Firmware"	8.9\(1.255\) Search vendor "Cisco" for product "Aironet 1850 Firmware" and version "8.9\(1.255\)"	-	Affected	in	Cisco Search vendor "Cisco"	Aironet 1800 Search vendor "Cisco" for product "Aironet 1800"	-	-	Safe
Cisco Search vendor "Cisco"	Aironet 1850 Firmware Search vendor "Cisco" for product "Aironet 1850 Firmware"	8.9\(4.28\) Search vendor "Cisco" for product "Aironet 1850 Firmware" and version "8.9\(4.28\)"	-	Affected	in	Cisco Search vendor "Cisco"	Aironet 1800 Search vendor "Cisco" for product "Aironet 1800"	-	-	Safe
Cisco Search vendor "Cisco"	Aironet 1850 Firmware Search vendor "Cisco" for product "Aironet 1850 Firmware"	8.9\(4.41\) Search vendor "Cisco" for product "Aironet 1850 Firmware" and version "8.9\(4.41\)"	-	Affected	in	Cisco Search vendor "Cisco"	Aironet 1800 Search vendor "Cisco" for product "Aironet 1800"	-	-	Safe
Cisco Search vendor "Cisco"	Aironet 1850 Firmware Search vendor "Cisco" for product "Aironet 1850 Firmware"	8.9\(4.49\) Search vendor "Cisco" for product "Aironet 1850 Firmware" and version "8.9\(4.49\)"	-	Affected	in	Cisco Search vendor "Cisco"	Aironet 1800 Search vendor "Cisco" for product "Aironet 1800"	-	-	Safe
Cisco Search vendor "Cisco"	Aironet 1850 Firmware Search vendor "Cisco" for product "Aironet 1850 Firmware"	8.9\(4.55\) Search vendor "Cisco" for product "Aironet 1850 Firmware" and version "8.9\(4.55\)"	-	Affected	in	Cisco Search vendor "Cisco"	Aironet 1800 Search vendor "Cisco" for product "Aironet 1800"	-	-	Safe
Cisco Search vendor "Cisco"	Aironet 1850 Firmware Search vendor "Cisco" for product "Aironet 1850 Firmware"	8.9\(4.58\) Search vendor "Cisco" for product "Aironet 1850 Firmware" and version "8.9\(4.58\)"	-	Affected	in	Cisco Search vendor "Cisco"	Aironet 1800 Search vendor "Cisco" for product "Aironet 1800"	-	-	Safe
Cisco Search vendor "Cisco"	Aironet 1850 Firmware Search vendor "Cisco" for product "Aironet 1850 Firmware"	8.9\(104.24\) Search vendor "Cisco" for product "Aironet 1850 Firmware" and version "8.9\(104.24\)"	-	Affected	in	Cisco Search vendor "Cisco"	Aironet 1800 Search vendor "Cisco" for product "Aironet 1800"	-	-	Safe
Cisco Search vendor "Cisco"	Aironet 1850 Firmware Search vendor "Cisco" for product "Aironet 1850 Firmware"	8.10\(1.139\) Search vendor "Cisco" for product "Aironet 1850 Firmware" and version "8.10\(1.139\)"	-	Affected	in	Cisco Search vendor "Cisco"	Aironet 1800 Search vendor "Cisco" for product "Aironet 1800"	-	-	Safe
Cisco Search vendor "Cisco"	Aironet 1850 Firmware Search vendor "Cisco" for product "Aironet 1850 Firmware"	8.10\(1.146\) Search vendor "Cisco" for product "Aironet 1850 Firmware" and version "8.10\(1.146\)"	-	Affected	in	Cisco Search vendor "Cisco"	Aironet 1800 Search vendor "Cisco" for product "Aironet 1800"	-	-	Safe
Cisco Search vendor "Cisco"	Aironet 2800 Firmware Search vendor "Cisco" for product "Aironet 2800 Firmware"	-	-	Affected	in	Cisco Search vendor "Cisco"	Aironet 2800 Search vendor "Cisco" for product "Aironet 2800"	-	-	Safe
Cisco Search vendor "Cisco"	Aironet 3800 Firmware Search vendor "Cisco" for product "Aironet 3800 Firmware"	-	-	Affected	in	Cisco Search vendor "Cisco"	Aironet 3800 Search vendor "Cisco" for product "Aironet 3800"	-	-	Safe
Cisco Search vendor "Cisco"	Aironet 4800 Firmware Search vendor "Cisco" for product "Aironet 4800 Firmware"	-	-	Affected	in	Cisco Search vendor "Cisco"	Aironet 4800 Search vendor "Cisco" for product "Aironet 4800"	-	-	Safe
Cisco Search vendor "Cisco"	Catalyst 9100 Firmware Search vendor "Cisco" for product "Catalyst 9100 Firmware"	-	-	Affected	in	Cisco Search vendor "Cisco"	Catalyst 9100 Search vendor "Cisco" for product "Catalyst 9100"	-	-	Safe