{"id":"CVE-2009-2976","url":"https://www.cyber-defence.io/tools/cve/CVE-2009-2976","generatedAt":"2026-10-27T20:40:27.990Z","title":"Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by…","description":"Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network.","published":"2009-08-27T17:30:00.000Z","lastModified":"2026-06-16T23:10:39.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":7.8,"severity":"HIGH","vector":"AV:N/AC:L/Au:N/C:C/I:N/A:N"},"cwe":["CWE-310"],"affected":["cisco/aironet ap1100","cisco/aironet ap1200"],"epss":{"score":0.01411,"percentile":0.72477,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.41%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://securitytracker.com/id?1022774","source":"cve@mitre.org"},{"url":"http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf","source":"cve@mitre.org"},{"url":"http://www.airmagnet.com/news/press_releases/2009/08252009.php","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.airmagnet.com/news/press_releases/2009/08252009.php","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-2976","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}