CVE-2019-1826

Cisco Aironet Series Access Points Quality of Service Denial of Service Vulnerability

Medium · published April 18, 2019

CVSS v3.0
6.8
EPSS
1%
Percentile
45.8
In the wild
Unconfirmed
What it is

A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation on QoS fields within Wi-Fi frames by the affected device. An attacker could exploit this vulnerability by sending malformed Wi-Fi frames to an affected device. A successful exploit could allow the attacker to cause the affected device to crash, resulting in a DoS condition.

The record
Technical detail
CVSS v3.0
6.8 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00559 · 45.8th percentile
Published
2019-04-18T01:15Z
EPSS history
Timeline
  • 18 APR 01:15Z
    Cisco Aironet Series Access Points Quality of Service Denial of Service Vulnerability
    cvelistv5