Aironet Access Point Software (Cisco) - vulnerabilities (CVEs)

17 CVEs, 0 in the last 30 days, 147 known versions, newest CVE from 2024-11-06. Vendor: Cisco.

CVEs of Aironet Access Point Software

CVE-2024-20418 - CVSS 10 (critical), 2024-11-06: A vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco Ultra-Reliable Wireless Backhaul (URWB) Access…
CVE-2024-20265 - CVSS 5.9 (medium), 2024-03-27: A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot…
CVE-2024-20271 - CVSS 8.6 (high), 2024-03-27: A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service…
CVE-2023-20097 - CVSS 6.7 (medium), 2023-03-23: A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root…
CVE-2023-20056 - CVSS 6.5 (medium), 2023-03-23: A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS)…
CVE-2022-20622 - CVSS 8.6 (high), 2022-04-15: A vulnerability in IP ingress packet processing of the Cisco Embedded Wireless Controller with Catalyst Access Points Software could allow an unauthenticated,…
CVE-2021-34740 - CVSS 7.4 (high), 2021-09-23: A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software could allow an unauthenticated, adjacent…
CVE-2021-1423 - CVSS 4.4 (medium), 2021-03-24: A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points (AP) could allow an authenticated, local attacker to overwrite files in…
CVE-2021-1449 - CVSS 6.7 (medium), 2021-03-24: A vulnerability in the boot logic of Cisco Access Points Software could allow an authenticated, local attacker to execute unsigned code at boot time. The…
CVE-2021-1439 - CVSS 7.4 (high), 2021-03-24: A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker…
CVE-2021-1437 - CVSS 7.5 (high), 2021-03-24: A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain…
CVE-2020-3560 - CVSS 8.6 (high), 2020-09-24: A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device.…
CVE-2020-3559 - CVSS 8.6 (high), 2020-09-24: A vulnerability in Cisco Aironet Access Point (AP) Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The…
CVE-2020-3552 - CVSS 7.4 (high), 2020-09-24: A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a…
CVE-2018-0249 - CVSS 4.3 (medium), 2018-05-02: A vulnerability when handling incoming 802.11 Association Requests for Cisco Aironet 1800 Series Access Point (APs) on Qualcomm Atheros (QCA) based hardware…
CVE-2018-0247 - CVSS 4.7 (medium), 2018-05-02: A vulnerability in Web Authentication (WebAuth) clients for the Cisco Wireless LAN Controller (WLC) and Aironet Access Points running Cisco IOS Software could…
CVE-2018-0234 - CVSS 8.6 (high), 2018-05-02: A vulnerability in the implementation of Point-to-Point Tunneling Protocol (PPTP) functionality in Cisco Aironet 1810, 1830, and 1850 Series Access Points…
CVE-2018-0250 - CVSS 4.1 (medium), 2018-05-02: A vulnerability in Central Web Authentication (CWA) with FlexConnect Access Points (APs) for Cisco Aironet 1560, 1810, 1810w, 1815, 1830, 1850, 2800, and 3800…
CVE-2017-3831 - CVSS 9.8 (critical), 2017-03-15: A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated, remote attacker to bypass…
CVE-2016-9221 - CVSS 4.3 (medium), 2017-01-26: A Denial of Service Vulnerability in 802.11 ingress connection authentication handling for the Cisco Mobility Express 2800 and 3800 Access Points (APs) could…
CVE-2016-9220 - CVSS 4.3 (medium), 2017-01-26: A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access Points (APs) could allow an…
CVE-2016-6363 - CVSS 6.5 (medium), 2016-08-22: The rate-limit feature in the 802.11 protocol implementation on Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.121.0 and 8.3.x before…
CVE-2016-6362 - CVSS 7.8 (high), 2016-08-22: Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow local users to gain…
CVE-2016-6361 - CVSS 6.5 (medium), 2016-08-22: The Aggregated MAC Protocol Data Unit (AMPDU) implementation on Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.121.0 and 8.3.x before…
CVE-2016-1419 - CVSS 8.1 (high), 2016-06-10: Cisco Access Point devices with software 8.2(102.43) allow remote attackers to cause a denial of service (device reload) via crafted ARP packets, aka Bug ID…
CVE-2015-6336 - CVSS 7.3 (high), 2016-01-15: Cisco Aironet 1800 devices with software 7.2, 7.3, 7.4, 8.1(112.3), 8.1(112.4), and 8.1(15.14) have a default account, which makes it easier for remote…
CVE-2015-6320 - CVSS 7.5 (high), 2016-01-15: The IP ingress packet handler on Cisco Aironet 1800 devices with software 8.1(112.3) and 8.1(112.4) allows remote attackers to cause a denial of service via a…
CVE-2015-6367 - CVSS 7.8 (high), 2015-11-14: Cisco Aironet 1800 devices with software 8.1(131.0) allow remote attackers to cause a denial of service (CPU consumption) by improperly establishing many…
CVE-2015-6315 - CVSS 7.2 (high), 2015-10-13: Cisco Aironet 1850 access points with software 8.1(112.4) allow local users to gain privileges via crafted CLI commands, aka Bug ID CSCuv79694.
CVE-2012-6026 - CVSS 6.1 (medium), 2013-03-05: The HTTP Profiler on the Cisco Aironet Access Point with software 15.2 and earlier does not properly manage buffers, which allows remote attackers to cause a…