CVE-2019-15264
Description
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol implementation of Cisco Aironet and Catalyst 9100 Access Points (APs) could allow an unauthenticated, adjacent attacker to cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to improper resource management during CAPWAP message processing. An attacker could exploit this vulnerability by sending a high volume of legitimate wireless management frames within a short time to an affected device. A successful exploit could allow the attacker to cause a device to restart unexpectedly, resulting in a DoS condition for clients associated with the AP.
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco aironet_1540_firmware | No range specified | — |
| cisco aironet_1560_firmware | No range specified | — |
| cisco aironet_1850_firmware | No range specified, 8.9\(1.249\), 8.9\(1.255\), 8.9\(4.28\), 8.9\(4.41\), 8.9\(4.49\), 8.9\(4.55\), 8.9\(4.58\), 8.9\(104.24\), 8.10\(1.139\), 8.10\(1.146\) | — |
| cisco aironet_2800_firmware | No range specified | — |
| cisco aironet_3800_firmware | No range specified | — |
| cisco aironet_4800_firmware | No range specified | — |
| cisco catalyst_9100_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.