cisco-sa-ap-ethport-dos-xtjTt8pY: Cisco Aironet Access Points Ethernet Wired Clients Denial of Service Vulnerability

Published Sep 24, 2020
·
Updated

A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by connecting as a wired client to the Ethernet interface of an affected device and sending a series of specific packets within a short time frame. A successful exploit could allow the attacker to cause a NULL pointer access that results in a reload of the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-ethport-dos-xtjTt8pY

Affected Software

3 affected componentsFixes available
Cisco Wireless LAN Controller Software Major=8.8 - 8.9, <8.10.105.0
8.10.105.0
Cisco Catalyst 9800 Wireless Controller Software Major=16.12 and earlier, <16.12.2s
16.12.2s
Cisco Business AP Software Major

Event History

Sep 24, 2020
Advisory Published
via Cisco·04:00 PM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of cisco-sa-ap-ethport-dos-xtjTt8pY?

The severity of cisco-sa-ap-ethport-dos-xtjTt8pY is classified as a denial of service (DoS) vulnerability.

2

How do I fix cisco-sa-ap-ethport-dos-xtjTt8pY?

To fix cisco-sa-ap-ethport-dos-xtjTt8pY, update to the recommended software versions provided by Cisco.

3

What products are affected by cisco-sa-ap-ethport-dos-xtjTt8pY?

cisco-sa-ap-ethport-dos-xtjTt8pY affects certain versions of Cisco Wireless LAN Controllers and Catalyst 9800 Wireless Controllers.

4

Can cisco-sa-ap-ethport-dos-xtjTt8pY be exploited remotely?

cisco-sa-ap-ethport-dos-xtjTt8pY requires an adjacent attacker, meaning it cannot be exploited remotely.

5

What is the cause of cisco-sa-ap-ethport-dos-xtjTt8pY?

The cause of cisco-sa-ap-ethport-dos-xtjTt8pY is insufficient input validation in the Ethernet packet handling of affected Cisco devices.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203