CVEvulnerability

CVE-2018-0441

7.4 HIGH Published 2018-10-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-10-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.4 HIGH — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS 3.0 ([email protected])
7.4 HIGH — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS 2.0 ([email protected])
6.1 MEDIUM — AV:A/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-400

Description

A vulnerability in the 802.11r Fast Transition feature set of Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a corruption of certain timer mechanisms triggered by specific roaming events. This corruption will eventually cause a timer crash. An attacker could exploit this vulnerability by sending malicious reassociation events multiple times to the same AP in a short period of time, causing a DoS condition on the affected AP.

Affected configurations

• cisco access points 8.0\(140.0\) • cisco access points 8.2\(141.0\) • cisco access points 8.2\(151.0\) • cisco access points 8.3\(102.0\) • cisco access points 8.3\(112.0\) • cisco access points 8.3\(114.74\) • cisco access points 15.3\(3\)jd • cisco access points (< 8.3.140.0) • cisco access points (>= 8.4 < 8.5.110.0)

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References