CVE-2021-1439
Description
A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of incoming mDNS traffic. An attacker could exploit this vulnerability by sending a crafted mDNS packet to an affected device through a wireless network that is configured in FlexConnect local switching mode or through a wired network on a configured mDNS VLAN. A successful exploit could allow the attacker to cause the access point (AP) to reboot, resulting in a DoS condition.
How to fix
- cisco catalyst_9800_firmware17.3.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco aironet_access_point_software | No range specified | — |
| cisco catalyst_9800_firmware | 17.1 ≤ v < 17.3.3 | 17.3.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.