cisco-sa-ap-assoc-dos-EgVqtON8: Cisco Catalyst 9100 Series Access Points Association Request Denial of Service Vulnerability
First published: Wed Sep 28 2022(Updated: )
A vulnerability in the 802.11 association frame validation of Cisco Catalyst 9100 Series Access Points (APs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of certain parameters within association request frames received by the AP. An attacker could exploit this vulnerability by sending a crafted 802.11 association request to a nearby device. An exploit could allow the attacker to unexpectedly reload the device, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-assoc-dos-EgVqtON8
Credit: This vulnerability was found by Javier Contreras Cisco during internal security testing
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Catalyst 9800 Wireless Controller Software | =17.6<17.6.4 | 17.6.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Cisco Catalyst 9100 Series Access Points vulnerability?
The vulnerability ID for this Cisco Catalyst 9100 Series Access Points vulnerability is cisco-sa-ap-assoc-dos-EgVqtON8.
What is the severity level of the Cisco Catalyst 9100 Series Access Points vulnerability?
The severity level of the Cisco Catalyst 9100 Series Access Points vulnerability is high with a score of 7.4.
What is the impacted software for this vulnerability?
The impacted software for this vulnerability is Cisco Catalyst 9800 Wireless Controller Software version up to 17.6.4.
How can an attacker exploit this vulnerability?
An unauthenticated, adjacent attacker can exploit this vulnerability by sending a maliciously crafted 802.11 association frame to the affected Cisco Catalyst 9100 Series Access Points, causing a denial of service (DoS) condition.
How can I fix this vulnerability?
To fix this vulnerability, update the Cisco Catalyst 9800 Wireless Controller Software to version 17.6.4 or later as recommended by Cisco.
- agent/weakness
- agent/title
- agent/type
- agent/event
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- vendor/cisco
- canonical/cisco catalyst 9800 wireless controller software
- version/cisco catalyst 9800 wireless controller software/17.6