Unscored severity · published Aug 27, 2009
CVE-2009-2861
The Over-the-Air Provisioning (OTAP) functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does not properly implement access-point association, which…
–
CVSS
1%
EPSS
No
On KEV
Description
The Over-the-Air Provisioning (OTAP) functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does not properly implement access-point association, which allows remote attackers to spoof a controller and cause a denial of service (service outage) via crafted remote radio management (RRM) packets, aka "SkyJack" or Bug ID CSCtb56664.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Aironet Ap1100 · Cisco
All versions, or not specified · source: NVD
AA
Aironet Ap1200 · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2861
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2861
securitytracker.com
http://securitytracker.com/id?1022774
Patch
http://tools.cisco.com/security/center/viewAlert.x?alertId=18919
www.airmagnet.com
http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf
www.airmagnet.com
http://www.airmagnet.com/news/press_releases/2009/08252009.php
www.securityfocus.com
http://www.securityfocus.com/bid/36145
Vendor Advisory
http://www.vupen.com/english/advisories/2009/2419
More from Aironet Ap1100
–
CVE-2012-1350
Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service (radio-interface input-queue hang) via IAPP 0x3281 packets, aka Bug ID…
–
CVE-2009-2976
Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN…
–
CVE-2006-0354
Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of…