CVE-2017-3800 — Improper Input Validation in Cisco

Vendor	Product	Version range	Fixed in
cisco	email_security_appliance	—	—
cisco	email_security_appliance	—	—
cisco	email_security_appliance	—	—
cisco	email_security_appliance_filter	—	—

Cisco

Cisco Aironet 1800, 2800, and 3800 Series Access Points MAC Authentication Bypass Vulnerability

vendor_cisco·2017-11-01·CVSS 6.1

CVE-2017-12281 [MEDIUM] CWE-287 Cisco Aironet 1800, 2800, and 3800 Series Access Points MAC Authentication Bypass Vulnerability Cisco Aironet 1800, 2800, and 3800 Series Access Points MAC Authentication Bypass Vulnerability A vulnerability in the implementation of Protected Extensible Authentication Protocol (PEAP) functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected device. The vulnerability exists because the affected device uses an incorrect default configuration setting of fail open when running in standalone mode. An attacker could exploit this vulnerability by attempting to connect to an affected device. A successful exploit could allow the attacker to bypass authentication and connect to the affected device. There are no workarounds that address this vulne

Cisco

Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms 802.11 Denial of Service Vulnerability

vendor_cisco·2017-11-01·CVSS 7.4

CVE-2017-12273 [HIGH] CWE-20 Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms 802.11 Denial of Service Vulnerability Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms 802.11 Denial of Service Vulnerability A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency (RF) adjacent attacker to cause the Access Point (AP) to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient frame validation of the 802.11 association request. An attacker could exploit this vulnerability by sending a malformed 802.11 association request to the targeted device. An exploit could allow the attacker to cause the AP to reload, resulting in a DoS condition while the AP is reloading. Cisco has released software updates that address this vulnerabil

Cisco

Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms Extensible Authentication Protocol Denial of Service Vulnerability

vendor_cisco·2017-11-01·CVSS 7.4

CVE-2017-12274 [HIGH] CWE-20 Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms Extensible Authentication Protocol Denial of Service Vulnerability Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms Extensible Authentication Protocol Denial of Service Vulnerability A vulnerability in Extensible Authentication Protocol (EAP) ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency (RF) adjacent attacker to cause the Access Point (AP) to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of the EAP frame. An attacker could exploit this vulnerability by sending a malformed EAP frame to the targeted device. A successful exploit could allow the attacker to cause the AP to reload, resulting in a DoS condition while the AP is reloading. It may be necessary to manually power cycle t

Cisco

Cisco Aironet 3800 Series Access Points Protected Management Frames User Denial of Service Vulnerability

vendor_cisco·2017-11-01·CVSS 4.7

CVE-2017-12283 [MEDIUM] CWE-119 Cisco Aironet 3800 Series Access Points Protected Management Frames User Denial of Service Vulnerability Cisco Aironet 3800 Series Access Points Protected Management Frames User Denial of Service Vulnerability A vulnerability in the handling of 802.11w Protected Management Frames (PAF) by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device. The vulnerability exists because the affected device does not properly validate 802.11w PAF disassociation and deauthentication frames that it receives. An attacker could exploit this vulnerability by sending a spoofed 802.11w PAF frame from a valid, authenticated client on an adjacent network to an affected device. A successful exploit could allow the attacker to terminate a single valid user connection to the affected device. There are no workarounds that

Cisco

Cisco Aironet 1800, 2800, and 3800 Series Access Points Plug-and-Play Arbitrary Code Execution Vulnerability

vendor_cisco·2017-05-03·CVSS 7.5

CVE-2017-3873 [HIGH] CWE-20 Cisco Aironet 1800, 2800, and 3800 Series Access Points Plug-and-Play Arbitrary Code Execution Vulnerability Cisco Aironet 1800, 2800, and 3800 Series Access Points Plug-and-Play Arbitrary Code Execution Vulnerability A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Access Point (AP) or Mobility Express image could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges. The vulnerability is due to insufficient validation of PnP server responses. The PnP feature is only active while the device does not contain a configuration, such as a first time boot or after a factory reset has been issued. An attacker with the ability to respond to PnP configuration requests from the affected device can exploit the vulnerability by returning malicious PnP responses. If a Cisco Applicat

Cisco

Cisco Email Security Appliance Filter Bypass Vulnerability

vendor_cisco·2017-01-18·CVSS 5.8

CVE-2017-3800 [MEDIUM] CWE-20 Cisco Email Security Appliance Filter Bypass Vulnerability Cisco Email Security Appliance Filter Bypass Vulnerability A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured message or content filters on the device. The vulnerability is due to incomplete input validation of email message attachments in different formats. An attacker could exploit this vulnerability by sending a crafted email message with an attachment to the ESA. An exploit could allow the attacker to bypass configured content or message filters configured on the ESA. This message filter bypass could allow email attachments that contain malware to pass through the targeted device. There are no workarounds that address this vulnerability. This advisory

Cisco

Cisco Email Security Appliance Filter Bypass Vulnerability

vendor_cisco·CVSS 3.0

CVE-2017-3800 Cisco Email Security Appliance Filter Bypass Vulnerability CVE-2017-3800: Cisco Email Security Appliance Filter Bypass Vulnerability A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured message or content filters on the device. The vulnerability is due to incomplete input validation of email message attachments in different formats. An attacker could exploit this vulnerability by sending a crafted email message with an attachment to the ESA. An exploit could allow the attacker to bypass configured content or message filters configured on the ESA. This message filter bypass could allow email attachments that contain malware to pass through the targeted device. There are no CVSS: 3.0 CWE: CWE-20, CWE-20 Bug IDs: CSCuz160

Cisco

Cisco Aironet 3800 Series Access Points Protected Management Frames User Denial of Service Vulnerability

vendor_cisco·CVSS 3.0

CVE-2017-12283 Cisco Aironet 3800 Series Access Points Protected Management Frames User Denial of Service Vulnerability CVE-2017-12283: Cisco Aironet 3800 Series Access Points Protected Management Frames User Denial of Service Vulnerability A vulnerability in the handling of 802.11w Protected Management Frames (PAF) by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device. The vulnerability exists because the affected device does not properly validate 802.11w PAF disassociation and deauthentication frames that it receives. An attacker could exploit this vulnerability by sending a spoofed 802.11w PAF frame from a valid, authenticated client on an adjacent network to an affected device. A successful exploit could allow the attacker to terminate a single valid user connection to the affected device. There are no CVSS

Cisco

Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms Extensible Authentication Protocol Denial of Service Vulnerability

vendor_cisco·CVSS 3.0

CVE-2017-12274 Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms Extensible Authentication Protocol Denial of Service Vulnerability CVE-2017-12274: Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms Extensible Authentication Protocol Denial of Service Vulnerability A vulnerability in Extensible Authentication Protocol (EAP) ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency (RF) adjacent attacker to cause the Access Point (AP) to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of the EAP frame. An attacker could exploit this vulnerability by sending a malformed EAP frame to the targeted device. A successful exploit could allow the attacker to cause the AP to reload, resulting in a DoS condition while the AP is reloading. It may be necessary to manually

Cisco

Cisco Aironet 1800, 2800, and 3800 Series Access Points MAC Authentication Bypass Vulnerability

vendor_cisco·CVSS 3.0

CVE-2017-12281 Cisco Aironet 1800, 2800, and 3800 Series Access Points MAC Authentication Bypass Vulnerability CVE-2017-12281: Cisco Aironet 1800, 2800, and 3800 Series Access Points MAC Authentication Bypass Vulnerability A vulnerability in the implementation of Protected Extensible Authentication Protocol (PEAP) functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected device. The vulnerability exists because the affected device uses an incorrect default configuration setting of fail open when running in standalone mode. An attacker could exploit this vulnerability by attempting to connect to an affected device. A successful exploit could allow the attacker to bypass authentication and connect to the affected device. There are no CVSS: 3.0 CWE: CWE-287

Cisco

Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms 802.11 Denial of Service Vulnerability

vendor_cisco·CVSS 3.0

CVE-2017-12273 Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms 802.11 Denial of Service Vulnerability CVE-2017-12273: Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms 802.11 Denial of Service Vulnerability A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency (RF) adjacent attacker to cause the Access Point (AP) to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient frame validation of the 802.11 association request. An attacker could exploit this vulnerability by sending a malformed 802.11 association request to the targeted device. An exploit could allow the attacker to cause the AP to reload, resulting in a DoS condition while the AP is reloading. Cisco has released software updates that address th

Cisco

Cisco Aironet 1800, 2800, and 3800 Series Access Points Plug-and-Play Arbitrary Code Execution Vulnerability

vendor_cisco·CVSS 3.0

CVE-2017-3873 Cisco Aironet 1800, 2800, and 3800 Series Access Points Plug-and-Play Arbitrary Code Execution Vulnerability CVE-2017-3873: Cisco Aironet 1800, 2800, and 3800 Series Access Points Plug-and-Play Arbitrary Code Execution Vulnerability A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Access Point (AP) or Mobility Express image could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges. The vulnerability is due to insufficient validation of PnP server responses. The PnP feature is only active while the device does not contain a configuration, such as a first time boot or after a factory reset has been issued. An attacker with the ability to respond to PnP configuration requests from the affected device can exploit the vulnerability by returning malicious PnP responses. If a C

GHSA

GHSA-79x7-9p27-9hg6: A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, rem

ghsa_unreviewed·2022-05-17

CVE-2017-3800 [MEDIUM] CWE-20 GHSA-79x7-9p27-9hg6: A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, rem A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured message or content filters on the device. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply a message filter or content filter to incoming email attachments. The vulnerability is not limited to any specific rules or actions for a message filter or content filter. More Information: CSCuz16076. Known Affected Releases: 9.7.1-066 9.7.1-HP2-207 9.8.5-085. Known Fixed Releases: 10.0.1-083 10.0.1-087.

CVE-2017-3800: A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote…

Affected

CVSS provenance