← Back

CVE-2021-34769

nvd nist
Published: Sep 23, 2021Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. These vulnerabilities are due to insufficient validation of CAPWAP packets. An attacker could exploit the vulnerabilities by sending a malformed CAPWAP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition.

Affected (7)

Products: Cisco: Ios Xe
1 product
Ios Xe
Configuration A
7 vulnerable · 10 platform
Vulnerable SoftwareAffected Versions
Cisco
Version 17.3.1
Version 17.3.2
Version 17.3.2a
Version 17.4.1
Version 17.5.1
Version 3.15.1xbs
Version 3.15.2xbs
Running on/withPlatform Versions
Cisco
Catalyst 9800
All versions
Cisco
Catalyst 9800 40
All versions
Cisco
Catalyst 9800 40 Wireless Controller
All versions
Cisco
Catalyst 9800 80
All versions
Cisco
Catalyst 9800 80 Wireless Controller
All versions
Cisco
Catalyst 9800 Cl
All versions
Cisco
Catalyst 9800 L
All versions
Cisco
Catalyst 9800 L C
All versions
Cisco
Catalyst 9800 L F
All versions
Cisco
Catalyst 9800 Embedded Wireless Controller
All versions

Timeline

No history available yet.