CVE-2016-9221

published 2017-01-26

CVE-2016-9221: A Denial of Service Vulnerability in 802.11 ingress connection authentication handling for the Cisco Mobility Express 2800 and 3800 Access Points (APs) could…

Priority P4 20 medium 4.3 CVSS 3.0

AV A AC L PR N UI N S U C N I N A L

A Denial of Service Vulnerability in 802.11 ingress connection authentication handling for the Cisco Mobility Express 2800 and 3800 Access Points (APs) could allow an unauthenticated, adjacent attacker to cause authentication to fail. Affected Products: This vulnerability affects Cisco Mobility Express 2800 Series and 3800 Series Access Points when configured in local mode in 40 MHz. More Information: CSCvb33575. Known Affected Releases: 8.2(121.12) 8.4(1.82). Known Fixed Releases: 8.2(131.2) 8.2(131.3) 8.2(131.4) 8.2(141.0) 8.3(104.53) 8.3(104.54) 8.4(1.80) 8.4(1.85).

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	aironet_access_point_software	—	—
cisco	aironet_access_point_software	—	—
cisco	mobility_express_2800_and_3800	—	—

CVSS provenance

nvd v3.0 4.3 MEDIUM CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

nvd v2.0 3.3 LOW AV:A/AC:L/Au:N/C:N/I:N/A:P

vendor_cisco 4.3 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-399