CVE-2016-6361: Input Validation

Published Aug 22, 2016

Updated

The Aggregated MAC Protocol Data Unit (AMPDU) implementation on Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.121.0 and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service (device reload) via a crafted AMPDU header, aka Bug ID CSCuz56288.

Affected Software

7 affected components

cisco Aironet Access Point Software=8.1\(15.14\)

cisco Aironet Access Point Software=8.1\(112.3\)

cisco Aironet Access Point Software=8.1\(112.4\)

cisco Aironet Access Point Software=8.1\(131.0\)

cisco Aironet Access Point Software=8.2\(100.0\)

cisco Aironet Access Point Software=8.2\(102.43\)

cisco Aironet Access Point Software=8.3.0

Event History

Aug 22, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-6361?

CVE-2016-6361 is classified as a medium severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2016-6361?

To fix CVE-2016-6361, upgrade to Cisco Aironet software version 8.2.121.0 or 8.3.102.0 or later.

What devices are affected by CVE-2016-6361?

CVE-2016-6361 affects Cisco Aironet 1800, 2800, and 3800 devices running specific vulnerable software versions.

What type of attack does CVE-2016-6361 enable?

CVE-2016-6361 allows remote attackers to execute a denial of service attack leading to device reload.

What is the cause of CVE-2016-6361?

CVE-2016-6361 is caused by a flaw in the Aggregated MAC Protocol Data Unit implementation.

CVE-2016-6361: Input Validation

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2016-6361?

How do I fix CVE-2016-6361?

What devices are affected by CVE-2016-6361?

What type of attack does CVE-2016-6361 enable?

What is the cause of CVE-2016-6361?

Company

Resources

Contact