cisco-sa-ap-assoc-dos-EgVqtON8: Cisco Catalyst 9100 Series Access Points Association Request Denial of Service Vulnerability

Published Sep 28, 2022
·
Updated

A vulnerability in the 802.11 association frame validation of Cisco Catalyst 9100 Series Access Points (APs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of certain parameters within association request frames received by the AP. An attacker could exploit this vulnerability by sending a crafted 802.11 association request to a nearby device. An exploit could allow the attacker to unexpectedly reload the device, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-assoc-dos-EgVqtON8

Credit

This vulnerability was found by Javier Contreras(Cisco during internal security testing)

Affected Software

1 affected componentFixes available
Cisco Catalyst 9800 Wireless Controller Software=17.6, <17.6.4
17.6.4

Event History

Sep 28, 2022
Advisory Published
via Cisco·04:00 PM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

What is the vulnerability ID for this Cisco Catalyst 9100 Series Access Points vulnerability?

The vulnerability ID for this Cisco Catalyst 9100 Series Access Points vulnerability is cisco-sa-ap-assoc-dos-EgVqtON8.

2

What is the severity level of the Cisco Catalyst 9100 Series Access Points vulnerability?

The severity level of the Cisco Catalyst 9100 Series Access Points vulnerability is high with a score of 7.4.

3

What is the impacted software for this vulnerability?

The impacted software for this vulnerability is Cisco Catalyst 9800 Wireless Controller Software version up to 17.6.4.

4

How can an attacker exploit this vulnerability?

An unauthenticated, adjacent attacker can exploit this vulnerability by sending a maliciously crafted 802.11 association frame to the affected Cisco Catalyst 9100 Series Access Points, causing a denial of service (DoS) condition.

5

How can I fix this vulnerability?

To fix this vulnerability, update the Cisco Catalyst 9800 Wireless Controller Software to version 17.6.4 or later as recommended by Cisco.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203