cisco-sa-apvlan-TDTtb4FY: Cisco Access Points VLAN Bypass from Native VLAN Vulnerability
A vulnerability in the client forwarding code of multiple Cisco Access Points (APs) could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards packets that are destined to a wireless client if they are received on the native VLAN. An attacker could exploit this vulnerability by obtaining access to the native VLAN and directing traffic directly to the client through their MAC/IP combination. A successful exploit could allow the attacker to bypass VLAN separation and potentially also bypass any Layer 3 protection mechanisms that are deployed. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apvlan-TDTtb4FY
Credit
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this Cisco vulnerability?
The vulnerability ID is cisco-sa-apvlan-TDTtb4FY.
What is the severity of the Cisco Access Points VLAN Bypass from Native VLAN Vulnerability?
The severity of this vulnerability is medium with a CVSS score of 4.7.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by injecting packets from the native VLAN to clients within nonnative VLANs on an affected Cisco Access Point.
Which Cisco products are affected by this vulnerability?
This vulnerability affects Cisco Wireless LAN Controller Software versions 8.5 and earlier up to 8.10.181.0, and Cisco Catalyst 9800 Wireless Controller Software versions 17.2 and earlier up to 17.6.2.
How can I fix the Cisco Access Points VLAN Bypass from Native VLAN Vulnerability?
To fix this vulnerability, upgrade to Cisco Wireless LAN Controller Software version 8.10.181.0 or later, or migrate to Cisco Catalyst 9800 Wireless Controller Software version 17.3.6 and apply the APSP patch (APSP patch no. TBD).