CVE-2018-0441 — Vulnetix

CVE-2018-0441 PUBLISHED CVSS 7.400000095367432 HIGH

A vulnerability in the 802.11r Fast Transition feature set of Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a corruption of certain timer mechanisms triggered by specific roaming events. This corruption will eventually cause a timer crash. An attacker could exploit this vulnerability by sending malicious reassociation events multiple times to the same AP in a short period of time, causing a DoS condition on the affected AP.

EPSS 0.26% · 49.3th percentile

Risk Scores

CVSS 3.0

7.400000095367432

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

EPSS Score

0.26%

49.3th percentile

Affected Products

Vendor	Product	Versions
Cisco	Cisco Aironet Access Point Software	n/a
cisco	access_points	8.2\(141.0\), 8.2\(151.0\), 8.3\(102.0\)

Exploit Intelligence

105680 (circl)
1041918 (circl)
20181017 Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability (circl)

Timeline

Oct 17, 2018 CVE Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 24, 2021 EPSS Score
Oct 26, 2021 EPSS Score
Dec 27, 2021 EPSS Score
Feb 28, 2022 EPSS Score
May 2, 2022 EPSS Score
Jul 3, 2022 EPSS Score
Sep 5, 2022 EPSS Score
Nov 6, 2022 EPSS Score
Jan 8, 2023 EPSS Score

References

Open in Interactive Console →