CVE-2019-1826
published 2019-04-18CVE-2019-1826: A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to cause a…
PriorityP422medium5.7CVSS 3.0
AVAACLPRLUINSUCNINAH
EPSS
0.57%
43.4th percentile
A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation on QoS fields within Wi-Fi frames by the affected device. An attacker could exploit this vulnerability by sending malformed Wi-Fi frames to an affected device. A successful exploit could allow the attacker to cause the affected device to crash, resulting in a DoS condition.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | aironet_access_point_firmware | — | — |
| cisco | aironet_series_access_points_quality_of_service | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
CVSS provenance
nvdv3.05.7MEDIUMCVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.5MEDIUMAV:A/AC:L/Au:S/C:N/I:N/A:C
vendor_cisco6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Aironet Series Access Points Quality of Service Denial of Service Vulnerability
vendor_cisco·2019-04-17·CVSS 6.8
CVE-2019-1826 [MEDIUM] Cisco Aironet Series Access Points Quality of Service Denial of Service Vulnerability
Cisco Aironet Series Access Points Quality of Service Denial of Service Vulnerability
A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device.
The vulnerability is due to improper input validation on QoS fields within Wi-Fi frames by the affected device. An attacker could exploit this vulnerability by sending malformed Wi-Fi frames to an affected device. A successful exploit could allow the attacker to cause the affected device to crash, resulting in a DoS condition.
There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/Cis
Cisco
Cisco Aironet Series Access Points Quality of Service Denial of Service Vulnerability
vendor_cisco·CVSS 3.0
CVE-2019-1826 Cisco Aironet Series Access Points Quality of Service Denial of Service Vulnerability
CVE-2019-1826: Cisco Aironet Series Access Points Quality of Service Denial of Service Vulnerability
A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation on QoS fields within Wi-Fi frames by the affected device. An attacker could exploit this vulnerability by sending malformed Wi-Fi frames to an affected device. A successful exploit could allow the attacker to cause the affected device to crash, resulting in a DoS condition. There are no
CVSS: 3.0
Bug IDs: CSCvk58560
GHSA
GHSA-72jx-gchv-4v87: A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to
ghsa_unreviewed·2022-05-13
CVE-2019-1826 [MEDIUM] CWE-20 GHSA-72jx-gchv-4v87: A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to
A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation on QoS fields within Wi-Fi frames by the affected device. An attacker could exploit this vulnerability by sending malformed Wi-Fi frames to an affected device. A successful exploit could allow the attacker to cause the affected device to crash, resulting in a DoS condition.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-04-18
Published