CVE-2019-1920 Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability
HighCVSS 7.4
EPSS 0.80%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability in the 802.11r Fast Transition (FT) implementation for Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected interface. The vulnerability is due to a lack of complete error handling condition for client authentication requests sent to a targeted interface configured for FT. An attacker could exploit this vulnerability by sending crafted authentication request traffic to the targeted interface, causing the device to restart unexpectedly.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco aironet 3700e firmware | = 15.3(3)jc14 | No fix listed |
| cisco aironet 3700e firmware | = 15.3(3)jd6 | No fix listed |
| cisco aironet 3700i firmware | = 15.3(3)jc14 | No fix listed |
| cisco aironet 3700i firmware | = 15.3(3)jd6 | No fix listed |
| cisco aironet 3700p firmware | = 15.3(3)jc14 | No fix listed |
| cisco aironet 3700p firmware | = 15.3(3)jd6 | No fix listed |
| cisco access points | < 8.2.170.0 | 8.2.170.0 |
| cisco access points | >= 8.3, < 8.3.150.0 | 8.3.150.0 |
| cisco access points | >= 8.4, < 8.5.131.0 | 8.5.131.0 |
| cisco access points | >= 8.6, < 8.8.100.0 | 8.8.100.0 |
| Cisco Aironet Access Point Software | < 8.8.100.0 | 8.8.100.0 |
References
- 109312 third-party-advisory vdb-entry
- 20190717 Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability vendor-advisory