A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency (RF) adjacent attacker to cause the Access Point (AP) to reload, resulting in a denial of service (DoS) condition.

The vulnerability is due to insufficient frame validation of the 802.11 association request.

An attacker could exploit this vulnerability by sending a malformed 802.11 association request to the targeted device.

An exploit could allow the attacker to cause the AP to reload, resulting in a DoS condition while the AP is reloading.

Cisco has released software updates that address this vulnerability.

There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-aironet1

Security Impact Rating: High

CVE: CVE-2017-12273

Leave a Reply