cisco-sa-capwap-dos-ShFzXf: Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability
First published: Thu Sep 24 2020(Updated: )
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of an affected device. The vulnerability is due to insufficient input validation during CAPWAP packet processing. An attacker could exploit this vulnerability by sending a crafted CAPWAP packet to an affected device, resulting in a buffer over-read. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition on the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capwap-dos-ShFzXf This advisory is part of the September 24, 2020, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 25 Cisco Security Advisories that describe 34 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: September 2020 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
Credit: Fabian Beck T
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE Software | ||
| Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-capwap-dos-ShFzXf?
The cisco-sa-capwap-dos-ShFzXf vulnerability is classified as a denial of service condition that can be exploited by unauthenticated remote attackers.
How do I fix cisco-sa-capwap-dos-ShFzXf?
To mitigate cisco-sa-capwap-dos-ShFzXf, updating to the latest recommended version of Cisco IOS XE Software is advised.
What systems are affected by cisco-sa-capwap-dos-ShFzXf?
Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers is vulnerable to the cisco-sa-capwap-dos-ShFzXf issue.
What type of attack does cisco-sa-capwap-dos-ShFzXf enable?
cisco-sa-capwap-dos-ShFzXf allows an unauthenticated remote attacker to cause a denial of service condition.
Is authentication required to exploit cisco-sa-capwap-dos-ShFzXf?
No, cisco-sa-capwap-dos-ShFzXf can be exploited by an attacker without any authentication.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/author
- agent/weakness
- agent/references
- agent/severity
- agent/title
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios xe software
- canonical/cisco ios xe software for catalyst 9800 series wireless controllers