CVE-2018-0249: Input Validation
First published: Wed May 02 2018(Updated: )
A vulnerability when handling incoming 802.11 Association Requests for Cisco Aironet 1800 Series Access Point (APs) on Qualcomm Atheros (QCA) based hardware platforms could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected system. A successful exploit could prevent new clients from joining the AP. The vulnerability is due to incorrect handling of malformed or invalid 802.11 Association Requests. An attacker could exploit this vulnerability by sending a malformed stream of 802.11 Association Requests to the local interface of the targeted device. A successful exploit could allow the attacker to cause a DoS situation on an affected system, causing new client 802.11 Association Requests to fail. This vulnerability affects the following Cisco products: Aironet 1560 Series Access Points, Aironet 1810 Series OfficeExtend Access Points, Aironet 1810w Series Access Points, Aironet 1815 Series Access Points, Aironet 1830 Series Access Points, Aironet 1850 Series Access Points, Aironet 2800 Series Access Points, Aironet 3800 Series Access Points. Cisco Bug IDs: CSCvg02116.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Aironet Access Point Software | =8.2\(161.0\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-0249?
The severity of CVE-2018-0249 is medium with a CVSS score of 4.3.
How does CVE-2018-0249 impact Cisco Aironet 1800 Series Access Points?
CVE-2018-0249 can cause a denial of service (DoS) condition on Cisco Aironet 1800 Series Access Points.
What software versions of Cisco Aironet Access Point are affected by CVE-2018-0249?
Cisco Aironet Access Point Software version 8.2(161.0) is affected by CVE-2018-0249.
How can an attacker exploit CVE-2018-0249?
A nearby unauthenticated attacker can exploit CVE-2018-0249 by sending specially crafted 802.11 Association Requests to the affected system.
How can I mitigate the impact of CVE-2018-0249?
To mitigate the impact of CVE-2018-0249, it is recommended to apply the necessary patches provided by Cisco.
- collector/nvd-index
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco aironet access point software
- version/cisco aironet access point software/8.2\(161.0\)