Sign-up

ID

VAR-201411-0250


CVE

CVE-2014-7998


TITLE

Cisco Aironet Operates on the access point Cisco IOS Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2014-005462

DESCRIPTION

Cisco IOS on Aironet access points, when "dot11 aaa authenticator" debugging is enabled, allows remote attackers to cause a denial of service via a malformed EAP packet, aka Bug ID CSCul15509. Vendors have confirmed this vulnerability Bug ID CSCul15509 It is released as.Malformed by a third party EAP Service disruption via packets (DoS) There is a possibility of being put into a state. Cisco Aironet Access Points are Cisco's wireless access point and bridge devices. A denial of service vulnerability exists in Cisco Aironet Access Points, which can exploit a vulnerability to initiate a denial of service attack. An attacker can exploit this issue to cause a denial-of-service condition. This issue is being tracked by Cisco Bug ID CSCul15509

Trust: 2.61

sources: NVD: CVE-2014-7998 // JVNDB: JVNDB-2014-005462 // CNVD: CNVD-2014-08365 // BID: 71102 // VULHUB: VHN-75943 // VULMON: CVE-2014-7998

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2014-08365

AFFECTED PRODUCTS

vendor:ciscomodel:iosscope:eqversion: -

Trust: 1.6

vendor:ciscomodel:aironet 600 series officeextendscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet 1040 seriesscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet 1140 seriesscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet 1260 seriesscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet 3500 seriesscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet 3600 seriesscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet 3600e access pointscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet 3600i access pointscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet 3600p access pointscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet ap1100 seriesscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet ap1130ag seriesscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet ap1131 seriesscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet ap1200 seriesscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet ap1230ag seriesscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet ap1240 seriesscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet ap1240ag seriesscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet ap1300 seriesscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet ap1400 seriesscope: - version: -

Trust: 0.8

vendor:ciscomodel:aironet ap340 seriesscope:eqversion:none

Trust: 0.8

vendor:ciscomodel:aironet ap340 seriesscope:eqversion:11.21

Trust: 0.8

vendor:ciscomodel:aironet ap350 seriesscope:eqversion:none

Trust: 0.8

vendor:ciscomodel:aironet ap350 seriesscope:eqversion:11.21

Trust: 0.8

vendor:ciscomodel:iosscope:eqversion:12.4(25d)ja

Trust: 0.8

vendor:ciscomodel:iosscope: - version: -

Trust: 0.6

vendor:ciscomodel:iosscope:eqversion:0

Trust: 0.3

sources: CNVD: CNVD-2014-08365 // BID: 71102 // JVNDB: JVNDB-2014-005462 // CNNVD: CNNVD-201411-261 // NVD: CVE-2014-7998

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2014-7998
value: HIGH

Trust: 1.0

NVD: CVE-2014-7998
value: HIGH

Trust: 0.8

CNVD: CNVD-2014-08365
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201411-261
value: HIGH

Trust: 0.6

VULHUB: VHN-75943
value: HIGH

Trust: 0.1

VULMON: CVE-2014-7998
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2014-7998
severity: HIGH
baseScore: 7.1
vectorString: AV:N/AC:M/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

CNVD: CNVD-2014-08365
severity: MEDIUM
baseScore: 5.7
vectorString: AV:A/AC:M/AU:N/C:N/I:N/A:C
accessVector: ADJACENT_NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 5.5
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-75943
severity: HIGH
baseScore: 7.1
vectorString: AV:N/AC:M/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: CNVD: CNVD-2014-08365 // VULHUB: VHN-75943 // VULMON: CVE-2014-7998 // JVNDB: JVNDB-2014-005462 // CNNVD: CNNVD-201411-261 // NVD: CVE-2014-7998

PROBLEMTYPE DATA

problemtype:CWE-264

Trust: 1.9

sources: VULHUB: VHN-75943 // JVNDB: JVNDB-2014-005462 // NVD: CVE-2014-7998

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201411-261

TYPE

permissions and access control

Trust: 0.6

sources: CNNVD: CNNVD-201411-261

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2014-005462

PATCH
title:Cisco Aironet DHCP Denial of Service Vulnerabiltyurl:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7998
Trust: 0.8
title:36428url:http://tools.cisco.com/security/center/viewAlert.x?alertId=36428
Trust: 0.8
title:Patch for Cisco Aironet Access Points Denial of Service Vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/51947
Trust: 0.6
title:Cisco: Cisco Aironet EAP Debugging Denial of Service Vulnerabilityurl:https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts&qid=Cisco-SA-20141117-CVE-2014-7998
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2014-08365 // 
            
            
            
            VULMON: CVE-2014-7998 // 
            
            
            
            JVNDB: JVNDB-2014-005462

EXTERNAL IDS
db:NVDid:CVE-2014-7998
Trust: 3.5
db:SECTRACKid:1031219
Trust: 1.2
db:BIDid:71102
Trust: 1.1
db:JVNDBid:JVNDB-2014-005462
Trust: 0.8
db:CNNVDid:CNNVD-201411-261
Trust: 0.7
db:CNVDid:CNVD-2014-08365
Trust: 0.6
db:VULHUBid:VHN-75943
Trust: 0.1
db:VULMONid:CVE-2014-7998
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2014-08365 // 
            
            
            
            VULHUB: VHN-75943 // 
            
            
            
            VULMON: CVE-2014-7998 // 
            
            
            
            BID: 71102 // 
            
            
            
            JVNDB: JVNDB-2014-005462 // 
            
            
            
            CNNVD: CNNVD-201411-261 // 
            
            
            
            NVD: CVE-2014-7998

REFERENCES
url:http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2014-7998
Trust: 2.7
url:http://www.securitytracker.com/id/1031219
Trust: 1.2
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/98692
Trust: 1.2
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-7998
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-7998
Trust: 0.8
url:http://www.securityfocus.com/bid/71102
Trust: 0.7
url:http://www.cisco.com/cisco/web/solutions/small_business/products/wireless/aironet_series_access_points/index.html
Trust: 0.3
url:http://www.cisco.com/
Trust: 0.3
url:https://cwe.mitre.org/data/definitions/264.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
url:http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20141117-cve-2014-7998
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2014-08365 // 
            
            
            
            VULHUB: VHN-75943 // 
            
            
            
            VULMON: CVE-2014-7998 // 
            
            
            
            BID: 71102 // 
            
            
            
            JVNDB: JVNDB-2014-005462 // 
            
            
            
            CNNVD: CNNVD-201411-261 // 
            
            
            
            NVD: CVE-2014-7998

CREDITS
Maxim Salomon and Timo Warns of Airbus Operations GmbH
Trust: 0.3
sources:
            
            
            BID: 71102

SOURCES
db:CNVDid:CNVD-2014-08365
db:VULHUBid:VHN-75943
db:VULMONid:CVE-2014-7998
db:BIDid:71102
db:JVNDBid:JVNDB-2014-005462
db:CNNVDid:CNNVD-201411-261
db:NVDid:CVE-2014-7998

LAST UPDATE DATE
2024-11-23T22:52:49.924000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2014-08365date:2014-11-19T00:00:00
db:VULHUBid:VHN-75943date:2017-09-08T00:00:00
db:VULMONid:CVE-2014-7998date:2017-09-08T00:00:00
db:BIDid:71102date:2014-11-14T00:00:00
db:JVNDBid:JVNDB-2014-005462date:2014-11-18T00:00:00
db:CNNVDid:CNNVD-201411-261date:2014-11-21T00:00:00
db:NVDid:CVE-2014-7998date:2024-11-21T02:18:24.163

SOURCES RELEASE DATE
db:CNVDid:CNVD-2014-08365date:2014-11-19T00:00:00
db:VULHUBid:VHN-75943date:2014-11-15T00:00:00
db:VULMONid:CVE-2014-7998date:2014-11-15T00:00:00
db:BIDid:71102date:2014-11-14T00:00:00
db:JVNDBid:JVNDB-2014-005462date:2014-11-18T00:00:00
db:CNNVDid:CNNVD-201411-261date:2014-11-17T00:00:00
db:NVDid:CVE-2014-7998date:2014-11-15T02:59:02.893