CVE-2018-0415

CWE-3884 documents4 sources

Severity

6.8MEDIUM

EPSS

0.9%

top 25.00%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Wap121 Firmware Cisco Wap125 Firmware Cisco Wap131 Firmware +7 more

Timeline

PublishedAug 15

Latest updateMay 13

Description

A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Series Wireless Access Points could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of certain EAPOL frames. An attacker could exploit this vulnerability by sending a stream of crafted EAPOL f…

CVSS vector

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 2.3 | Impact: 4.0

Affected Packages10 packages

▶CVEListV5cisco_systems,_inc./small_business_100_series_wireless_access_pointsunspecified

▶CVEListV5cisco_systems,_inc./small_business_300_series_wireless_access_pointsunspecified

▶NVDcisco/wap121_firmware1.0.6.6

▶NVDcisco/wap125_firmware1.0.6.6

▶NVDcisco/wap131_firmware1.0.6.6

🔴Vulnerability Details

GHSA

GHSA-5xhp-frwf-2g4r: A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless↗2022-05-13

▶

CVEList

CVE-2018-0415: A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless↗2018-08-15

▶

📋Vendor Advisories

Cisco

Cisco Small Business 100 Series and 300 Series Wireless Access Points Denial of Service Vulnerability↗2018-08-15

▶