Cisco Aironet Access Point Ethernet Packet null pointer dereference

Summaryinfo

A vulnerability described as problematic has been identified in Cisco Aironet Access Point. Affected is an unknown function. Executing a manipulation as part of Ethernet Packet can lead to null pointer dereference. This vulnerability appears as CVE-2020-3552. The attacker needs to be present on the local network. There is no available exploit. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in Cisco Aironet Access Point (Wireless LAN Software) (unknown version). It has been declared as problematic. This vulnerability affects an unknown code block. The manipulation as part of a Ethernet Packet leads to a null pointer dereference vulnerability. The CWE definition for the vulnerability is CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. As an impact it is known to affect availability. CVE summarizes:

A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by connecting as a wired client to the Ethernet interface of an affected device and sending a series of specific packets within a short time frame. A successful exploit could allow the attacker to cause a NULL pointer access that results in a reload of the affected device.

The weakness was presented 09/24/2020 as cisco-sa-ap-ethport-dos-xtjTt8 as confirmed advisory (Website). The advisory is shared for download at tools.cisco.com. This vulnerability was named CVE-2020-3552 since 12/12/2019. Access to the local network is required for this attack. No form of authentication is required for a successful exploitation. There are neither technical details nor an exploit publicly available.

Upgrading eliminates this vulnerability.

See VDB-161909 for similar entry. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Wireless LAN Software

Vendor

• Cisco

Name

• Aironet Access Point

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion