cnvd-2019-01928
Vulnerability from cnvd
Title
Cisco IOS Access Points Software拒绝服务漏洞
Description
Cisco IOS Access Points（APs）Software是美国思科（Cisco）公司的一套用于管理控制访问接入点设备的软件。 Cisco IOS APs Software中的802.11r Fast Transition feature set存在安全漏洞。物理位置邻近的攻击者可通过多次发送恶意的重新关联事件利用该漏洞造成拒绝服务。
Severity
高
Patch Name
Cisco IOS Access Points Software拒绝服务漏洞的补丁
Patch Description
Cisco IOS Access Points（APs）Software是美国思科（Cisco）公司的一套用于管理控制访问接入点设备的软件。 Cisco IOS APs Software中的802.11r Fast Transition feature set存在安全漏洞。物理位置邻近的攻击者可通过多次发送恶意的重新关联事件利用该漏洞造成拒绝服务。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-ap-ft-dos

Reference
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-ap-ft-dos
Impacted products
Name
['Cisco IOS Software', 'Cisco Aironet 1800 Series Access Points', 'Cisco Industrial Wireless 3702 Access Point', 'Cisco AP803 Integrated Access Point', 'Cisco AP803 Access Point Module', 'Cisco Aironet 702W Access Point', 'Cisco Aironet 702i Access Point', 'Cisco Aironet 3700 Series Access Points', 'Cisco Aironet 3600i Access Point', 'Cisco Aironet 3500i Access Point', 'Cisco Aironet 3500e Access Point', 'Cisco Aironet 2700e Access Point', 'Cisco Aironet 1700i Access Points', 'Cisco Aironet 1600i Access Point', 'Cisco Aironet 1600e Access Point', 'Cisco Aironet 1572IC Outdoor Access Point', 'Cisco Aironet 1572EC Outdoor Access Point', 'Cisco Aironet 1572EAC Outdoor Access Point', 'Cisco Aironet 1552WU Outdoor Access Point', 'Cisco Aironet 1552S Outdoor Access Point', 'Cisco Aironet 1552I Outdoor Access Point', 'Cisco Aironet 1530i Outdoor Access Point', 'Cisco Aironet 1530e Outdoor Access Point', 'Cisco Aironet 1524 Lightweight Outdoor Mesh Access Point', 'Cisco Aironet 1260 Access Point', 'Cisco Aironet 1140 Access Point', 'Cisco Aironet 1040 Series Access Point', 'Cisco 1522 Lightweight Outdoor Mesh Access Point']
Show details on source website

To clipboard 

{
  "bids": {
    "bid": {
      "bidNumber": "105680"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-0441"
    }
  },
  "description": "Cisco IOS Access Points\uff08APs\uff09Software\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u7528\u4e8e\u7ba1\u7406\u63a7\u5236\u8bbf\u95ee\u63a5\u5165\u70b9\u8bbe\u5907\u7684\u8f6f\u4ef6\u3002\n\nCisco IOS APs Software\u4e2d\u7684802.11r Fast Transition feature set\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u7269\u7406\u4f4d\u7f6e\u90bb\u8fd1\u7684\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u591a\u6b21\u53d1\u9001\u6076\u610f\u7684\u91cd\u65b0\u5173\u8054\u4e8b\u4ef6\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-ap-ft-dos",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-01928",
  "openTime": "2019-01-18",
  "patchDescription": "Cisco IOS Access Points\uff08APs\uff09Software\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u7528\u4e8e\u7ba1\u7406\u63a7\u5236\u8bbf\u95ee\u63a5\u5165\u70b9\u8bbe\u5907\u7684\u8f6f\u4ef6\u3002\r\n\r\nCisco IOS APs Software\u4e2d\u7684802.11r Fast Transition feature set\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u7269\u7406\u4f4d\u7f6e\u90bb\u8fd1\u7684\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u591a\u6b21\u53d1\u9001\u6076\u610f\u7684\u91cd\u65b0\u5173\u8054\u4e8b\u4ef6\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco IOS Access Points Software\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco IOS Software",
      "Cisco Aironet 1800 Series Access Points",
      "Cisco Industrial Wireless 3702 Access Point",
      "Cisco AP803 Integrated Access Point",
      "Cisco AP803 Access Point Module",
      "Cisco Aironet 702W Access Point",
      "Cisco Aironet 702i Access Point",
      "Cisco Aironet 3700 Series Access Points",
      "Cisco Aironet 3600i Access Point",
      "Cisco Aironet 3500i Access Point",
      "Cisco Aironet 3500e Access Point",
      "Cisco Aironet 2700e Access Point",
      "Cisco Aironet 1700i Access Points",
      "Cisco Aironet 1600i Access Point",
      "Cisco Aironet 1600e Access Point",
      "Cisco Aironet 1572IC Outdoor Access Point",
      "Cisco Aironet 1572EC Outdoor Access Point",
      "Cisco Aironet 1572EAC Outdoor Access Point",
      "Cisco Aironet 1552WU Outdoor Access Point",
      "Cisco Aironet 1552S Outdoor Access Point",
      "Cisco Aironet 1552I Outdoor Access Point",
      "Cisco Aironet 1530i Outdoor Access Point",
      "Cisco Aironet 1530e Outdoor Access Point",
      "Cisco Aironet 1524 Lightweight Outdoor Mesh Access Point",
      "Cisco Aironet 1260 Access Point",
      "Cisco Aironet 1140 Access Point",
      "Cisco Aironet 1040 Series Access Point",
      "Cisco 1522 Lightweight Outdoor Mesh Access Point"
    ]
  },
  "referenceLink": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-ap-ft-dos",
  "serverity": "\u9ad8",
  "submitTime": "2018-10-19",
  "title": "Cisco IOS Access Points Software\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.