ID CVE-2006-0354
Summary Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections) by sending the management interface a large number of spoofed ARP packets, which creates a large ARP table that exhausts memory, aka Bug ID CSCsc16644.
References
Vulnerable Configurations
  • cpe:2.3:h:cisco:aironet_ap1100:*:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:aironet_ap1100:*:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:aironet_ap1130ag:*:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:aironet_ap1130ag:*:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:aironet_ap1200:*:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:aironet_ap1200:*:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:aironet_ap1230ag:*:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:aironet_ap1230ag:*:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:aironet_ap1240ag:*:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:aironet_ap1240ag:*:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:aironet_ap1300:*:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:aironet_ap1300:*:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:aironet_ap1400:*:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:aironet_ap1400:*:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:aironet_ap350:*:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:aironet_ap350:*:*:*:*:*:*:*:*
CVSS
Base: 5.5 (as of 11-10-2017 - 01:30)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
ADJACENT_NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:A/AC:L/Au:S/C:N/I:N/A:C
oval via4
accepted 2008-09-08T04:00:35.719-04:00
class vulnerability
contributors
name Yuzheng Zhou
organization Hewlett-Packard
description Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections) by sending the management interface a large number of spoofed ARP packets, which creates a large ARP table that exhausts memory, aka Bug ID CSCsc16644.
family ios
id oval:org.mitre.oval:def:5680
status accepted
submitted 2008-05-26T11:06:36.000-04:00
title Cisco Aironet Access Point ARP Memory Exhaustion DoS Vulnerability
version 3
refmap via4
bid 16217
cisco 20060112 Access Point Memory Exhaustion from ARP Attacks
osvdb 22375
sectrack 1015483
secunia 18430
sreason 339
vupen ADV-2006-0176
xf cisco-aironet-arp-dos(24086)
Last major update 11-10-2017 - 01:30
Published 22-01-2006 - 20:03
Last modified 11-10-2017 - 01:30
Back to Top