Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-34740

A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to incorrect error handling when an affected device receives an unexpected 802.11 frame. An attacker could exploit this vulnerability by sending certain 802.11 frames over the wireless network to an interface on an affected AP. A successful exploit could allow the attacker to cause a packet buffer leak. This could eventually result in buffer allocation failures, which would trigger a reload of the affected device.

Published

2021-09-23T03:15:19.947

Last Modified

2024-11-21T06:11:05.760

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.4 (HIGH)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

6.5

Impact Score

6.9

Weaknesses
  • Type: Secondary
    CWE-401
  • Type: Primary
    CWE-401
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco aironet_access_point_software < 8.10.162.0 Yes
Operating System cisco aironet_access_point_software 17.2 Yes
Operating System cisco aironet_access_point_software 17.3 Yes
Hardware cisco 1100-4g\/6g_integrated_services_router - No
Hardware cisco 1100-4p_integrated_services_router - No
Hardware cisco 1100-8p_integrated_services_router - No
Hardware cisco 1100_integrated_services_router - No
Hardware cisco 1101-4p_integrated_services_router - No
Hardware cisco 1101_integrated_services_router - No
Hardware cisco 1109-2p_integrated_services_router - No
Hardware cisco 1109-4p_integrated_services_router - No
Hardware cisco 1109_integrated_services_router - No
Hardware cisco 1111x-8p_integrated_services_router - No
Hardware cisco 1111x_integrated_services_router - No
Hardware cisco 111x_integrated_services_router - No
Hardware cisco 1120_integrated_services_router - No
Hardware cisco 1160_integrated_services_router - No
Hardware cisco 6300_series_access_points - No
Hardware cisco aironet_1540 - No
Hardware cisco aironet_1542d - No
Hardware cisco aironet_1542i - No
Hardware cisco aironet_1560 - No
Hardware cisco aironet_1562d - No
Hardware cisco aironet_1562e - No
Hardware cisco aironet_1562i - No
Hardware cisco aironet_1800 - No
Hardware cisco aironet_1800i - No
Hardware cisco aironet_1810 - No
Hardware cisco aironet_1810w - No
Hardware cisco aironet_1815 - No
Hardware cisco aironet_1815i - No
Hardware cisco aironet_1830 - No
Hardware cisco aironet_1830e - No
Hardware cisco aironet_1830i - No
Hardware cisco aironet_1840 - No
Hardware cisco aironet_1850 - No
Hardware cisco aironet_1850e - No
Hardware cisco aironet_1850i - No
Hardware cisco aironet_2800 - No
Hardware cisco aironet_2800e - No
Hardware cisco aironet_2800i - No
Hardware cisco aironet_3800 - No
Hardware cisco aironet_3800e - No
Hardware cisco aironet_3800i - No
Hardware cisco aironet_3800p - No
Hardware cisco aironet_4800 - No
Hardware cisco catalyst_9100 - No
Hardware cisco catalyst_9105 - No
Hardware cisco catalyst_9105axi - No
Hardware cisco catalyst_9105axw - No
Hardware cisco catalyst_9115 - No
Hardware cisco catalyst_9115_ap - No
Hardware cisco catalyst_9115axe - No
Hardware cisco catalyst_9115axi - No
Hardware cisco catalyst_9117 - No
Hardware cisco catalyst_9117_ap - No
Hardware cisco catalyst_9117axi - No
Hardware cisco catalyst_9120 - No
Hardware cisco catalyst_9120_ap - No
Hardware cisco catalyst_9120axe - No
Hardware cisco catalyst_9120axi - No
Hardware cisco catalyst_9120axp - No
Hardware cisco catalyst_9124 - No
Hardware cisco catalyst_9124axd - No
Hardware cisco catalyst_9124axi - No
Hardware cisco catalyst_9130 - No
Hardware cisco catalyst_9130_ap - No
Hardware cisco catalyst_9130axe - No
Hardware cisco catalyst_9130axi - No
Hardware cisco catalyst_iw6300 - No
Hardware cisco catalyst_iw6300_ac - No
Hardware cisco catalyst_iw6300_dc - No
Hardware cisco catalyst_iw6300_dcw - No
References