Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2009-2861

Published: Aug 27, 2009 | Modified: Aug 28, 2009
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.3 HIGH
AV:A/AC:M/Au:N/C:N/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2009-2861
CWEhttps://cwe.mitre.org/data/definitions/NVD-Other.html

The Over-the-Air Provisioning (OTAP) functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does not properly implement access-point association, which allows remote attackers to spoof a controller and cause a denial of service (service outage) via crafted remote radio management (RRM) packets, aka SkyJack or Bug ID CSCtb56664.

Affected Software

Name Vendor Start Version End Version
Aironet_ap1100 Cisco * *
Aironet_ap1200 Cisco * *

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2023 Aqua Security Software Ltd.   Privacy Policy | Terms of Use