Skip to content
Sign in
CVE-2018-0415Not scoredCWE-388

CVE-2018-0415: Cisco Systems, Inc. Small Business 100 Series Wireless Access Points vulnerability

Cisco Systems, Inc. · Small Business 100 Series Wireless Access Points

Vendor fix available · Affected: Cisco Systems, Inc. Small Business 100 Series Wireless Access Points · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.6%probability of exploitation in the next 30 days
50th percentile
050100

Higher than 50% of scored CVEs

Not scored yet. The CVE record carries no CVSS score.

DescriptionCVE.org

A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Series Wireless Access Points could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of certain EAPOL frames. An attacker could exploit this vulnerability by sending a stream of crafted EAPOL frames to an affected device. A successful exploit could allow the attacker to force the access point (AP) to disassociate all the associated stations (STAs) and to disallow future, new association requests. Cisco Bug IDs: CSCvj97472.

Affected products2

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Cisco Systems, Inc. · Small Business 100 Series Wireless Access PointsVersions not stated
  • Cisco Systems, Inc. · Small Business 300 Series Wireless Access PointsVersions not stated

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV
Not listed
Public check
No public nuclei template
Published
August 2018

CoverageNo articles yet

No CyberSIXT article names CVE-2018-0415 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

Updated AboutDevelopersSign in