CVE-2016-9220
published 2017-01-26CVE-2016-9220: A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access Points (APs) could allow an…
PriorityP417medium4.3CVSS 3.0
AVAACLPRNUINSUCNINAL
EPSS
0.45%
36.1th percentile
A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access Points (APs) could allow an unauthenticated, adjacent attacker to cause the connection table to be full of invalid connections and be unable to process new incoming requests. More Information: CSCvb66659. Known Affected Releases: 8.2(130.0). Known Fixed Releases: 8.2(131.10) 8.2(131.6) 8.2(141.0) 8.3(104.56) 8.4(1.88) 8.4(1.91).
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | aironet_access_point_software | — | — |
| cisco | mobility_express_2800_and_3800_802.11 | — | — |
CVSS provenance
nvdv3.04.3MEDIUMCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
nvdv2.03.3LOWAV:A/AC:L/Au:N/C:N/I:N/A:P
vendor_cisco4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-c86h-r59x-c7j5: A Denial of Service Vulnerability in 802
ghsa_unreviewed·2022-05-17
CVE-2016-9220 [MEDIUM] GHSA-c86h-r59x-c7j5: A Denial of Service Vulnerability in 802
A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access Points (APs) could allow an unauthenticated, adjacent attacker to cause the connection table to be full of invalid connections and be unable to process new incoming requests. More Information: CSCvb66659. Known Affected Releases: 8.2(130.0). Known Fixed Releases: 8.2(131.10) 8.2(131.6) 8.2(141.0) 8.3(104.56) 8.4(1.88) 8.4(1.91).
Cisco
Cisco Mobility Express 2800 and 3800 802.11 Denial of Service Vulnerability
vendor_cisco·2017-01-18·CVSS 4.3
CVE-2016-9220 [MEDIUM] CWE-399 Cisco Mobility Express 2800 and 3800 802.11 Denial of Service Vulnerability
Cisco Mobility Express 2800 and 3800 802.11 Denial of Service Vulnerability
A vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access Points (APs) could allow an unauthenticated, adjacent attacker to cause the connection table to be full of invalid connections and be unable to process new incoming requests.
The vulnerability is due to lack of proper error handling when the 802.11 frame is received with an unexpected status code. An attacker could exploit this vulnerability by sending a crafted 802.11 frame to the targeted device. An exploit could allow the attacker to impact the availability of the device due to the connection table being filled with invalid connections.
There are no workarounds that address this vulnerability.
This advisor
Cisco
Cisco Mobility Express 2800 and 3800 802.11 Denial of Service Vulnerability
vendor_cisco·CVSS 3.0
CVE-2016-9220 Cisco Mobility Express 2800 and 3800 802.11 Denial of Service Vulnerability
CVE-2016-9220: Cisco Mobility Express 2800 and 3800 802.11 Denial of Service Vulnerability
A vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access Points (APs) could allow an unauthenticated, adjacent attacker to cause the connection table to be full of invalid connections and be unable to process new incoming requests. The vulnerability is due to lack of proper error handling when the 802.11 frame is received with an unexpected status code. An attacker could exploit this vulnerability by sending a crafted 802.11 frame to the targeted device. An exploit could allow the attacker to impact the availability of the device due to the connection table being filled with invalid connections. There are no
CVSS: 3.0
CWE: CWE-399, CWE-399
Bug IDs: CSCvb6
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-01-26
Published