NetSight
IP …
high7.4

CVE-2019-1920

A vulnerability in the 802.11r Fast Transition (FT) implementation for Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker…

Impact

A vulnerability in the 802.11r Fast Transition (FT) implementation for Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected interface. The vulnerability is due to a lack of complete error handling condition for client authentication requests sent to a targeted interface configured for FT. An attacker could exploit this vulnerability by sending crafted authentication request traffic to the targeted interface, causing the device to restart unexpectedly.

Affected products

VendorProductAffected versions
CiscoAironet 3700e Firmware
Versions 15.3\(3\)jc14, 15.3\(3\)jd6
CiscoAironet 3700i Firmware
Versions 15.3\(3\)jc14, 15.3\(3\)jd6
CiscoAironet 3700p Firmware
Versions 15.3\(3\)jc14, 15.3\(3\)jd6
CiscoAccess Points
before 8.2.170.0
from 8.3 before 8.3.150.0
from 8.4 before 8.5.131.0
from 8.6 before 8.8.100.0

Weakness classification

CWE-20

References