SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2006-0354

Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections) by sending the management interface a large number of…

MEDIUM 5.5EPSS 10.5%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 10.5%, higher than 95% of all known CVEs. Patch or mitigate before the next change window.

Description

Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections) by sending the management interface a large number of spoofed ARP packets, which creates a large ARP table that exhausts memory, aka Bug ID CSCsc16644.

CVSS 2.0
5.5 MEDIUMAV:A/AC:L/Au:S/C:N/I:N/A:C
EPSS
10.48% probability · 95th percentile
CISA KEV
Not listed
Weakness
CWE-399
Affected
cisco/aironet ap1100 · cisco/aironet ap1130ag · cisco/aironet ap1200 · cisco/aironet ap1230ag · cisco/aironet ap1240ag · cisco/aironet ap1300 · cisco/aironet ap1400 · cisco/aironet ap350
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.