Cisco Aironet 4800 -

Cisco Wireless LAN Controller Management Interface Authentication Bypass Vulnerability

Cisco Aironet Access Points Unauthorized Access Vulnerability

Cisco Aironet Access Points UDP Flooding Denial of Service Vulnerability

Cisco Mobility Express Software Cross-Site Request Forgery Vulnerability

Cisco Access Points SSH Management Privilege Escalation Vulnerability

Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure Vulnerability

Cisco Aironet Access Points Ethernet Wired Clients Denial of Service Vulnerability

Cisco Aironet Access Points and Catalyst 9100 Access Points CAPWAP Denial of Service Vulnerability

Cisco Aironet Access Points FlexConnect Multicast DNS Denial of Service Vulnerability

Cisco Aironet Access Points WLAN Control Protocol Packet Buffer Leak Denial of Service Vulnerability

Cisco Aironet Series Access Points Quality of Service Denial of Service Vulnerability

Cisco Access Point Software Arbitrary Code Execution Vulnerability

Cisco Access Point Software Command Injection Vulnerability

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.

Cisco Access Point Software Denial of Service Vulnerability

An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.

Cisco Access Points VLAN Bypass from Native VLAN Vulnerability

Cisco Aironet Access Points Arbitrary File Overwrite Vulnerability

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.