description: A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to insufficient input validation of certain IPv4 packets. An attacker could exploit this vulnerability by sending a crafted IPv4 packet either to or through an affected device. A successful exploit could allow the attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To successfully exploit this vulnerability, the attacker does not need to be associated with the affected AP. This vulnerability cannot be exploited by sending IPv6 packets.
problem types: Improper Input Validation
affected:
{
vendor: Cisco
product: Cisco Aironet Access Point Software
versions:
version: 8.2.100.0, status: affected
version: 8.2.130.0, status: affected
version: 8.2.111.0, status: affected
version: 8.2.110.0, status: affected
version: 8.2.121.0, status: affected
version: 8.2.141.0, status: affected
version: 8.2.151.0, status: affected
version: 8.2.160.0, status: affected
version: 8.2.161.0, status: affected
version: 8.2.164.0, status: affected
version: 8.2.166.0, status: affected
version: 8.2.170.0, status: affected
version: 8.2.163.0, status: affected
version: 8.3.102.0, status: affected
version: 8.3.111.0, status: affected
version: 8.3.112.0, status: affected
version: 8.3.121.0, status: affected
version: 8.3.122.0, status: affected
version: 8.3.130.0, status: affected
version: 8.3.131.0, status: affected
version: 8.3.132.0, status: affected
version: 8.3.133.0, status: affected
version: 8.3.140.0, status: affected
version: 8.3.141.0, status: affected
version: 8.3.143.0, status: affected
version: 8.3.150.0, status: affected
version: 8.3.108.0, status: affected
version: 8.3.90.53, status: affected
version: 8.3.104.46, status: affected
version: 8.3.200.200, status: affected
version: 8.3.104.64, status: affected
version: 8.3.15.165, status: affected
version: 8.3.90.11, status: affected
version: 8.3.135.0, status: affected
version: 8.3.104.14, status: affected
version: 8.3.90.36, status: affected
version: 8.3.15.142, status: affected
version: 8.3.104.37, status: affected
version: 8.3.15.117, status: affected
version: 8.3.15.120, status: affected
version: 8.3.15.25, status: affected
version: 8.3.15.158, status: affected
version: 8.3.15.118, status: affected
version: 8.3.90.25, status: affected
version: 8.3.15.169, status: affected
version: 8.3.90.58, status: affected
version: 8.4.100.0, status: affected
version: 8.4.1.199, status: affected
version: 8.4.1.91, status: affected
version: 8.4.1.142, status: affected
version: 8.4.1.175, status: affected
version: 8.4.1.218, status: affected
version: 8.4.1.92, status: affected
version: 8.5.103.0, status: affected
version: 8.5.105.0, status: affected
version: 8.5.110.0, status: affected
version: 8.5.120.0, status: affected
version: 8.5.131.0, status: affected
version: 8.5.140.0, status: affected
version: 8.5.135.0, status: affected
version: 8.5.151.0, status: affected
version: 8.5.101.0, status: affected
version: 8.5.102.0, status: affected
version: 8.5.161.0, status: affected
version: 8.5.160.0, status: affected
version: 8.5.100.0, status: affected
version: 8.5.171.0, status: affected
version: 8.5.164.0, status: affected
version: 8.5.182.0, status: affected
version: 8.5.182.11 ME, status: affected
version: 8.7.102.0, status: affected
version: 8.7.106.0, status: affected
version: 8.7.1.16, status: affected
version: 8.8.100.0, status: affected
version: 8.8.111.0, status: affected
version: 8.8.120.0, status: affected
version: 8.8.125.0, status: affected
version: 8.8.130.0, status: affected
version: 8.6.101.0, status: affected
version: 8.6.1.84, status: affected
version: 8.6.1.70, status: affected
version: 8.6.1.71, status: affected
version: 8.9.100.0, status: affected
version: 8.9.111.0, status: affected
version: 8.10.105.0, status: affected
version: 8.10.111.0, status: affected
version: 8.10.130.0, status: affected
version: 8.10.112.0, status: affected
version: 8.10.122.0, status: affected
version: 8.10.113.0, status: affected
version: 8.10.121.0, status: affected
version: 8.10.141.0, status: affected
version: 8.10.142.0, status: affected
version: 8.10.151.0, status: affected
version: 8.10.150.0, status: affected
version: 8.10.171.0, status: affected
version: 8.10.181.0, status: affected
version: 8.10.182.0, status: affected
version: 8.10.161.0, status: affected
version: 8.10.170.0, status: affected
version: 8.10.183.0, status: affected
version: 8.10.162.0, status: affected
version: 8.10.185.0, status: affected
}
{
vendor: Cisco
product: Cisco Business Wireless Access Point Software
versions:
version: 10.0.1.0, status: affected
version: 10.0.2.0, status: affected
version: 10.1.1.0, status: affected
version: 10.1.2.0, status: affected
version: 10.2.1.0, status: affected
version: 10.2.2.0, status: affected
version: 10.3.1.0, status: affected
version: 10.3.1.1, status: affected
version: 10.3.2.0, status: affected
version: 1.0.0.13, status: affected
version: 1.0.0.16, status: affected
version: 1.0.0.3, status: affected
version: 1.0.0.39, status: affected
version: 1.0.0.4, status: affected
version: 1.0.0.5, status: affected
version: 1.0.0.7, status: affected
version: 1.0.1.2, status: affected
version: 1.0.1.3, status: affected
version: 1.0.1.4, status: affected
version: 1.0.1.5, status: affected
version: 1.0.1.6, status: affected
version: 1.0.1.7, status: affected
version: 1.0.2.0, status: affected
version: 1.0.2.13, status: affected
version: 1.0.2.14, status: affected
version: 1.0.2.15, status: affected
version: 1.0.2.16, status: affected
version: 1.0.2.17, status: affected
version: 1.0.2.2, status: affected
version: 1.0.2.8, status: affected
version: 1.0.3.1, status: affected
version: 1.0.4.4, status: affected
version: 1.0.4.3, status: affected
version: 1.0.6.6, status: affected
version: 1.0.3.4, status: affected
version: 1.0.6.8, status: affected
version: 1.0.6.2, status: affected
version: 1.0.2.3, status: affected
version: 1.0.5.3, status: affected
version: 1.0.1.10, status: affected
version: 1.0.4.2, status: affected
version: 1.0.6.5, status: affected
version: 1.0.6.7, status: affected
version: 1.0.5.0, status: affected
version: 1.0.0.10, status: affected
version: 1.0.0.12, status: affected
version: 1.0.0.14, status: affected
version: 1.0.0.15, status: affected
version: 1.0.0.17, status: affected
version: 1.0.0.9, status: affected
version: 1.0.1.11, status: affected
version: 1.0.1.12, status: affected
version: 1.0.1.9, status: affected
version: 1.0.2.6, status: affected
version: 1.1.0.5, status: affected
version: 1.1.0.7, status: affected
version: 1.1.0.9, status: affected
version: 1.1.1.0, status: affected
version: 1.1.2.4, status: affected
version: 1.1.4.6, status: affected
version: 1.1.3.2, status: affected
version: 1.1.4.0, status: affected
version: 1.1.0.3, status: affected
version: 1.1.0.4, status: affected
version: 1.1.0.6, status: affected
version: 1.1.2.3, status: affected
version: 10.4.1.0, status: affected
version: 10.4.2.0, status: affected
version: 10.6.1.0, status: affected
version: 10.7.1.0, status: affected
version: 10.8.1.0, status: affected
version: 1.2.0.2, status: affected
version: 1.2.0.3, status: affected
version: 1.2.1.3, status: affected
version: 1.3.0.3, status: affected
version: 1.3.0.4, status: affected
version: 1.3.0.6, status: affected
version: 1.3.0.7, status: affected
version: 10.5.2.0, status: affected
}
{
vendor: Cisco
product: Cisco Aironet Access Point Software (IOS XE Controller)
versions:
version: 16.10.1e, status: affected
version: 16.10.1, status: affected
version: 17.1.1t, status: affected
version: 17.1.1s, status: affected
version: 17.1.1, status: affected
version: 16.11.1a, status: affected
version: 16.11.1, status: affected
version: 16.11.1c, status: affected
version: 16.11.1b, status: affected
version: 16.12.1s, status: affected
version: 16.12.4, status: affected
version: 16.12.1, status: affected
version: 16.12.2s, status: affected
version: 16.12.1t, status: affected
version: 16.12.4a, status: affected
version: 16.12.5, status: affected
version: 16.12.3, status: affected
version: 16.12.6, status: affected
version: 16.12.8, status: affected
version: 16.12.7, status: affected
version: 16.12.6a, status: affected
version: 17.3.1, status: affected
version: 17.3.2a, status: affected
version: 17.3.3, status: affected
version: 17.3.4, status: affected
version: 17.3.5, status: affected
version: 17.3.2, status: affected
version: 17.3.4c, status: affected
version: 17.3.5a, status: affected
version: 17.3.5b, status: affected
version: 17.3.6, status: affected
version: 17.2.1, status: affected
version: 17.2.1a, status: affected
version: 17.2.3, status: affected
version: 17.2.2, status: affected
version: 17.5.1, status: affected
version: 17.4.1, status: affected
version: 17.4.2, status: affected
version: 17.6.1, status: affected
version: 17.6.2, status: affected
version: 17.6.3, status: affected
version: 17.6.4, status: affected
version: 17.6.5, status: affected
version: 17.10.1, status: affected
version: 17.9.1, status: affected
version: 17.9.2, status: affected
version: 17.9.3, status: affected
version: 17.9.4, status: affected
version: 17.9.4a, status: affected
version: 17.7.1, status: affected
version: 17.8.1, status: affected
version: 17.11.1, status: affected
version: 17.12.1, status: affected
}
metrics:
format: cvssV3_1
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
baseScore: 8.6
baseSeverity: HIGH
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
]
exploits: The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.