CVE-2015-6320
published 2016-01-15CVE-2015-6320: The IP ingress packet handler on Cisco Aironet 1800 devices with software 8.1(112.3) and 8.1(112.4) allows remote attackers to cause a denial of service via a…
PriorityP338high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
1.93%
77.7th percentile
The IP ingress packet handler on Cisco Aironet 1800 devices with software 8.1(112.3) and 8.1(112.4) allows remote attackers to cause a denial of service via a crafted header in an IP packet, aka Bug ID CSCuv63138.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | aironet_1800_series_access_point | — | — |
| cisco | aironet_access_point_software | — | — |
| cisco | aironet_access_point_software | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-xqw6-m98x-r88x: The IP ingress packet handler on Cisco Aironet 1800 devices with software 8
ghsa_unreviewed·2022-05-17
CVE-2015-6320 [HIGH] GHSA-xqw6-m98x-r88x: The IP ingress packet handler on Cisco Aironet 1800 devices with software 8
The IP ingress packet handler on Cisco Aironet 1800 devices with software 8.1(112.3) and 8.1(112.4) allows remote attackers to cause a denial of service via a crafted header in an IP packet, aka Bug ID CSCuv63138.
Cisco
Cisco Aironet 1800 Series Access Point Denial of Service Vulnerability
vendor_cisco·2016-01-13·CVSS 7.8
CVE-2015-6320 [HIGH] CWE-399 Cisco Aironet 1800 Series Access Point Denial of Service Vulnerability
Cisco Aironet 1800 Series Access Point Denial of Service Vulnerability
A vulnerability in the IP ingress packet handler of Cisco Aironet 1800 Series Access Point devices could allow an unauthenticated, remote attacker to cause a complete denial of service (DoS) condition.
The vulnerability is due to improper input validation of IP packet headers. An attacker could exploit this vulnerability by sending a crafted IP packet to an affected device. An successful exploit could allow the attacker to cause the device to reload unexpectedly.
Cisco has released software updates that address this vulnerability. There are no workarounds that mitigate this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/
Cisco
Cisco Aironet 1800 Series Access Point Denial of Service Vulnerability
vendor_cisco
CVE-2015-6320 Cisco Aironet 1800 Series Access Point Denial of Service Vulnerability
CVE-2015-6320: Cisco Aironet 1800 Series Access Point Denial of Service Vulnerability
A vulnerability in the IP ingress packet handler of Cisco Aironet 1800 Series Access Point devices could allow an unauthenticated, remote attacker to cause a complete denial of service (DoS) condition. The vulnerability is due to improper input validation of IP packet headers. An attacker could exploit this vulnerability by sending a crafted IP packet to an affected device. An successful exploit could allow the attacker to cause the device to reload unexpectedly. Cisco has released software updates that address this vulnerability. There are no
CWE: CWE-399, CWE-399
Bug IDs: CSCuv63138
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2016-01-15
Published