CVE-2021-1615

High

Description

A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller (EWC) Software for Catalyst Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected AP. This vulnerability is due to insufficient buffer allocation. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to exhaust available resources and cause a DoS condition on an affected AP, as well as a DoS condition for client traffic traversing the AP.

SeverityHigh
CVSS8.6
Exploit probability—
ProductCisco Embedded Wireless Controller
PublishedSep 23, 2021
First seenSep 23, 2021
Weakness typeCWE-410CWE-410

How to fix

Affected products

ProductAffected versionsFixed in
cisco embedded_wireless_controllerv ≤ 17.6.1—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.