Medium severity · published Aug 15, 2018
CVE-2018-0415
A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco…
6.8
CVSS
0.6%
EPSS
No
On KEV
Description
A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Series Wireless Access Points could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of certain EAPOL frames. An attacker could exploit this vulnerability by sending a stream of crafted EAPOL frames to an affected device. A successful exploit could allow the attacker to force the access point (AP) to disassociate all the associated stations (STAs) and to disallow future, new association requests. Cisco Bug IDs: CSCvj97472.
CVSS vector
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SB
Small Business 100 Series Wireless Access Points · Cisco Systems, Inc.
All versions, or not specified · source: vendor
SB
Small Business 300 Series Wireless Access Points · Cisco Systems, Inc.
All versions, or not specified · source: vendor
WF
Wap121 Firmware · Cisco
through 1.0.6.6 · source: NVD
WF
Wap125 Firmware · Cisco
through 1.0.6.6 · source: NVD
WF
Wap131 Firmware · Cisco
through 1.0.6.6 · source: NVD
WF
Wap150 Firmware · Cisco
through 1.0.6.6 · source: NVD
WF
Wap321 Firmware · Cisco
through 1.0.6.6 · source: NVD
WF
Wap351 Firmware · Cisco
through 1.0.6.6 · source: NVD
WF
Wap361 Firmware · Cisco
through 1.0.6.6 · source: NVD
WF
Wap371 Firmware · Cisco
through 1.0.6.6 · source: NVD
Affected product
SB
Small Business 100 Series Wireless Access Points
Cisco Systems, Inc.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-0415
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-0415
Third Party Advisory
http://www.securityfocus.com/bid/105116
Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-csb-wap-dos
More from Small Business 100 Series Wireless Access Points
5.3
CVE-2018-0412
A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco…
