Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-15264

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol implementation of Cisco Aironet and Catalyst 9100 Access Points (APs) could allow an unauthenticated, adjacent attacker to cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to improper resource management during CAPWAP message processing. An attacker could exploit this vulnerability by sending a high volume of legitimate wireless management frames within a short time to an affected device. A successful exploit could allow the attacker to cause a device to restart unexpectedly, resulting in a DoS condition for clients associated with the AP.

Published

2019-10-16T19:15:14.050

Last Modified

2024-11-21T04:28:19.327

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

6.5

Impact Score

6.9

Weaknesses
  • Type: Secondary
    CWE-400
  • Type: Primary
    CWE-400
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco aironet_1540_firmware - Yes
Hardware cisco aironet_1540 - No
Operating System cisco aironet_1560_firmware - Yes
Hardware cisco aironet_1560 - No
Operating System cisco aironet_1850_firmware - Yes
Operating System cisco aironet_1850_firmware 8.9\(1.249\) Yes
Operating System cisco aironet_1850_firmware 8.9\(1.255\) Yes
Operating System cisco aironet_1850_firmware 8.9\(4.28\) Yes
Operating System cisco aironet_1850_firmware 8.9\(4.41\) Yes
Operating System cisco aironet_1850_firmware 8.9\(4.49\) Yes
Operating System cisco aironet_1850_firmware 8.9\(4.55\) Yes
Operating System cisco aironet_1850_firmware 8.9\(4.58\) Yes
Operating System cisco aironet_1850_firmware 8.9\(104.24\) Yes
Operating System cisco aironet_1850_firmware 8.10\(1.139\) Yes
Operating System cisco aironet_1850_firmware 8.10\(1.146\) Yes
Hardware cisco aironet_1800 - No
Operating System cisco aironet_2800_firmware - Yes
Hardware cisco aironet_2800 - No
Operating System cisco aironet_3800_firmware - Yes
Hardware cisco aironet_3800 - No
Operating System cisco aironet_4800_firmware - Yes
Hardware cisco aironet_4800 - No
Operating System cisco catalyst_9100_firmware - Yes
Hardware cisco catalyst_9100 - No
References