Unscored severity · published Aug 27, 2009
CVE-2009-2976
Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Aironet Ap1100 · Cisco
All versions, or not specified · source: NVD
AA
Aironet Ap1200 · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2976
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2976
securitytracker.com
http://securitytracker.com/id?1022774
www.airmagnet.com
http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf
www.airmagnet.com
http://www.airmagnet.com/news/press_releases/2009/08252009.php
More from Aironet Ap1100
–
CVE-2012-1350
Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service (radio-interface input-queue hang) via IAPP 0x3281 packets, aka Bug ID…
–
CVE-2009-2861
The Over-the-Air Provisioning (OTAP) functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does not properly implement access-point association, which…
–
CVE-2006-0354
Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of…