CVE-2014-7998: High severity cisco ios vulnerability
Published Nov 15, 2014
·Updated
Cisco IOS on Aironet access points, when "dot11 aaa authenticator" debugging is enabled, allows remote attackers to cause a denial of service via a malformed EAP packet, aka Bug ID CSCul15509.
Affected Software
23 affected components
Cisco IOS
Cisco Aironet 1040
Cisco Aironet 1140
Cisco Aironet 1260
Cisco Aironet 3500
Cisco Aironet 3600
Cisco Aironet 3600e
Cisco Aironet 3600i
Cisco Aironet 3600p
Cisco Aironet 600 Office Extend
Cisco Aironet Ap1100
Cisco Aironet Ap1130ag
Cisco Aironet Ap1131
Cisco Aironet Ap1200
Cisco Aironet Ap1230ag
Cisco Aironet Ap1240
Cisco Aironet Ap1240ag
Cisco Aironet Ap1300
Cisco Aironet Ap1400
Cisco Aironet Ap340
Cisco Aironet Ap340=11.21
Cisco Aironet Ap350
Cisco Aironet Ap350=11.21
Event History
Nov 15, 2014
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-7998?
CVE-2014-7998 has been classified as a denial of service vulnerability.
2
How do I fix CVE-2014-7998?
To fix CVE-2014-7998, disable the 'dot11 aaa authenticator' debugging feature on affected Cisco IOS devices.
3
What types of devices are affected by CVE-2014-7998?
CVE-2014-7998 affects Cisco IOS on Aironet access points when specific debugging is enabled.
4
Can CVE-2014-7998 be exploited remotely?
Yes, CVE-2014-7998 can be exploited by remote attackers using malformed EAP packets.
5
Is there a workaround for CVE-2014-7998?
The primary workaround for CVE-2014-7998 is to avoid enabling debugging for 'dot11 aaa authenticator'.