CVE-2019-1826

published 2019-04-18

CVE-2019-1826: A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to cause a…

medium 5.7 CVSS 3.0

AV A AC L PR L UI N S U C N I N A H

A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation on QoS fields within Wi-Fi frames by the affected device. An attacker could exploit this vulnerability by sending malformed Wi-Fi frames to an affected device. A successful exploit could allow the attacker to cause the affected device to crash, resulting in a DoS condition.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	aironet_access_point_firmware	—	—
cisco	aironet_series_access_points_quality_of_service	—	—
cisco	cisco_aironet_access_point_software	—	—

CWE-20