CVEvulnerability

CVE-2019-1826

5.7 MEDIUM Published 2019-04-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-04-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.8 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS 3.0 ([email protected])
5.7 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.5 MEDIUM — AV:A/AC:L/Au:S/C:N/I:N/A:C
Weaknesses
CWE-20

Description

A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation on QoS fields within Wi-Fi frames by the affected device. An attacker could exploit this vulnerability by sending malformed Wi-Fi frames to an affected device. A successful exploit could allow the attacker to cause the affected device to crash, resulting in a DoS condition.

Affected configurations

• cisco aironet access point firmware • cisco aironet access point firmware 8.5\(131.3\)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References