CVE-2021-34740: Cisco Aironet Access Points WLAN Control Protocol Packet Buffer Leak Denial of Service Vulnerability
A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to incorrect error handling when an affected device receives an unexpected 802.11 frame. An attacker could exploit this vulnerability by sending certain 802.11 frames over the wireless network to an interface on an affected AP. A successful exploit could allow the attacker to cause a packet buffer leak. This could eventually result in buffer allocation failures, which would trigger a reload of the affected device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-34740?
CVE-2021-34740 is rated as a medium severity vulnerability due to its potential to cause a denial of service condition.
How do I fix CVE-2021-34740?
To remediate CVE-2021-34740, users should upgrade to the fixed versions provided in Cisco's security advisory.
Which Cisco products are affected by CVE-2021-34740?
CVE-2021-34740 affects specific versions of the Cisco Aironet Access Point software.
What type of attack does CVE-2021-34740 allow?
CVE-2021-34740 allows an unauthenticated adjacent attacker to cause a reload of the affected device.
What impact does CVE-2021-34740 have on Cisco devices?
The impact of CVE-2021-34740 on Cisco devices is a potential denial of service due to device reloads.