CVE-2009-2861: High severity Cisco Aironet Ap1100 vulnerability

Published Aug 27, 2009

Updated

The Over-the-Air Provisioning (OTAP) functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does not properly implement access-point association, which allows remote attackers to spoof a controller and cause a denial of service (service outage) via crafted remote radio management (RRM) packets, aka "SkyJack" or Bug ID CSCtb56664.

Affected Software

2 affected components

Cisco Aironet Ap1100

cisco Aironet Ap1200

Remediation

Patch Available

http://tools.cisco.com/security/center/viewAlert.x?alertId=18919

Event History

Aug 27, 2009

CVE Published

via MITRE·04:31 PM

Data Sourced

via MITRE·04:31 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-2861?

CVE-2009-2861 has been assigned a high severity rating due to its potential to cause denial of service.

How do I fix CVE-2009-2861?

To mitigate CVE-2009-2861, it is recommended to upgrade affected Cisco Aironet Lightweight Access Point firmware.

What devices are affected by CVE-2009-2861?

CVE-2009-2861 affects Cisco Aironet Lightweight Access Point 1100 and 1200 models.

What impact does CVE-2009-2861 have on devices?

CVE-2009-2861 allows remote attackers to spoof a controller, leading to service outages.

Is CVE-2009-2861 being actively exploited?

As of the latest reports, CVE-2009-2861 has the potential for exploitation, but specific active exploits may vary.