CVE-2017-12279: Infoleak
First published: Thu Nov 02 2017(Updated: )
A vulnerability in the packet processing code of Cisco IOS Software for Cisco Aironet Access Points could allow an unauthenticated, adjacent attacker to retrieve content from memory on an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to insufficient condition checks that are performed by the affected device when the device adds padding to egress packets. An attacker could exploit this vulnerability by sending a crafted IP packet to an affected device. A successful exploit could allow the attacker to retrieve content from memory on the affected device, which could lead to the disclosure of confidential information. Cisco Bug IDs: CSCvc21581.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Aironet AP Firmware | ||
| Cisco Aironet Series Access Points |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-12279?
The severity of CVE-2017-12279 is considered high due to the potential for unauthorized memory content disclosure.
How do I fix CVE-2017-12279?
To fix CVE-2017-12279, apply the latest available firmware updates for the affected Cisco Aironet Access Points.
Who can exploit CVE-2017-12279?
CVE-2017-12279 can be exploited by an unauthenticated, adjacent attacker.
What type of information could be disclosed due to CVE-2017-12279?
CVE-2017-12279 could disclose confidential information from the memory of the affected device.
Which products are impacted by CVE-2017-12279?
CVE-2017-12279 impacts Cisco Aironet Access Points running affected versions of Cisco IOS Software.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/references
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/trending
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco aironet ap firmware
- canonical/cisco aironet series access points