Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9g2r-34xj-79x9

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability in Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9800 Series Routers could allow an unauthenticated, adjacent attacker to send ICMPv6 traffic prior to the client being placed into RUN state. The vulnerability is due to an incomplete access control list (ACL) being applied prior to RUN state. An attacker could exploit this vulnerability by connecting to the associated service set identifier (SSID) and sending ICMPv6 traffic. A successful exploit could allow the attacker to send ICMPv6 traffic prior to RUN state.

A vulnerability in Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9800 Series Routers could allow an unauthenticated, adjacent attacker to send ICMPv6 traffic prior to the client being placed into RUN state. The vulnerability is due to an incomplete access control list (ACL) being applied prior to RUN state. An attacker could exploit this vulnerability by connecting to the associated service set identifier (SSID) and sending ICMPv6 traffic. A successful exploit could allow the attacker to send ICMPv6 traffic prior to RUN state.

EPSS

Процентиль: 20%
0.00062
Низкий

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 4.7
nvd
больше 5 лет назад

A vulnerability in Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9800 Series Routers could allow an unauthenticated, adjacent attacker to send ICMPv6 traffic prior to the client being placed into RUN state. The vulnerability is due to an incomplete access control list (ACL) being applied prior to RUN state. An attacker could exploit this vulnerability by connecting to the associated service set identifier (SSID) and sending ICMPv6 traffic. A successful exploit could allow the attacker to send ICMPv6 traffic prior to RUN state.

CVSS3: 4.7
fstec
больше 5 лет назад

Уязвимость микропрограммного обеспечения контроллера беспроводной связи Cisco IOS XE маршрутизаторов Cisco Catalyst 9800 Series, связанная с ошибками при управлении доступом, позволяющая нарушителю отправить трафик ICMPv6 до перевода клиента в состояние RUN

EPSS

Процентиль: 20%
0.00062
Низкий

Дефекты

CWE-269