CVE-2021-34740

A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to incorrect error handling when an affected device receives an unexpected 802.11 frame. An attacker could exploit this vulnerability by sending certain 802.11 frames over the wireless network to an interface on an affected AP. A successful exploit could allow the attacker to cause a packet buffer leak. This could eventually result in buffer allocation failures, which would trigger a reload of the affected device.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:cisco:aironet_access_point_software:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:aironet_access_point_software:17.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:aironet_access_point_software:17.3:*:*:*:*:*:*:*
OR cpe:2.3:h:cisco:1100-4g\/6g_integrated_services_router:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:6300_series_access_points:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1540:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1542d:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1542i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1560:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1562d:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1562e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1562i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1800:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1800i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1810:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1810w:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1815:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1815i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1830:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1830e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1830i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1840:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1850:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1850e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_1850i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_2800:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_2800e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_2800i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_3800:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_3800e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_3800i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_3800p:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:aironet_4800:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9100:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9105:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9105axi:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9105axw:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9115:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9115_ap:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9115axe:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9115axi:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9117:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9117_ap:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9117axi:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9120:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9120_ap:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9120axe:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9120axi:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9120axp:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9124:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9124axd:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9124axi:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9130:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9130_ap:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9130axe:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_9130axi:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_iw6300:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_iw6300_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_iw6300_dc:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_iw6300_dcw:-:*:*:*:*:*:*:*

History

21 Nov 2024, 06:11

Type Values Removed Values Added
References () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-wpa-pktleak-dos-uSTyGrL - Vendor Advisory () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-wpa-pktleak-dos-uSTyGrL - Vendor Advisory

Information

Published : 2021-09-23 03:15

Updated : 2024-11-21 06:11


NVD link : CVE-2021-34740

Mitre link : CVE-2021-34740

CVE.ORG link : CVE-2021-34740


JSON object : View

Products Affected

cisco

  • catalyst_9117axi
  • aironet_1850
  • aironet_2800i
  • catalyst_9105axw
  • aironet_1830e
  • catalyst_iw6300
  • catalyst_9117
  • catalyst_9115_ap
  • 1109_integrated_services_router
  • aironet_2800
  • aironet_1810
  • catalyst_iw6300_dc
  • aironet_2800e
  • aironet_3800
  • catalyst_9115axe
  • catalyst_9124axi
  • aironet_1562d
  • 1100_integrated_services_router
  • catalyst_9130_ap
  • aironet_4800
  • 111x_integrated_services_router
  • 1101-4p_integrated_services_router
  • aironet_3800p
  • catalyst_iw6300_ac
  • 1111x-8p_integrated_services_router
  • catalyst_9120
  • catalyst_9120_ap
  • catalyst_9120axi
  • aironet_1815i
  • aironet_1540
  • aironet_1850i
  • catalyst_9130axe
  • aironet_1840
  • catalyst_iw6300_dcw
  • 1120_integrated_services_router
  • catalyst_9124
  • 1160_integrated_services_router
  • catalyst_9115
  • catalyst_9100
  • catalyst_9130axi
  • aironet_1800i
  • aironet_1830
  • catalyst_9105
  • aironet_1850e
  • aironet_1542i
  • 1100-8p_integrated_services_router
  • catalyst_9124axd
  • catalyst_9130
  • 1100-4g\/6g_integrated_services_router
  • aironet_3800i
  • catalyst_9115axi
  • catalyst_9105axi
  • aironet_1800
  • aironet_3800e
  • catalyst_9120axp
  • 1100-4p_integrated_services_router
  • aironet_1560
  • catalyst_9117_ap
  • aironet_1810w
  • aironet_access_point_software
  • 1101_integrated_services_router
  • 1109-4p_integrated_services_router
  • aironet_1830i
  • 1109-2p_integrated_services_router
  • aironet_1562e
  • aironet_1815
  • aironet_1562i
  • 1111x_integrated_services_router
  • catalyst_9120axe
  • aironet_1542d
  • 6300_series_access_points
CWE
CWE-401

Missing Release of Memory after Effective Lifetime