Published: 15/11/2014 Updated: 08/09/2017

CVSS v2 Base Score: 6.1 | Impact Score: 6.9 | Exploitability Score: 6.5

VMScore: 543

Vector: AV:A/AC:L/Au:N/C:N/I:N/A:C

The DHCP implementation in Cisco IOS on Aironet access points does not properly handle error conditions with short leases and unsuccessful lease-renewal attempts, which allows remote malicious users to cause a denial of service (device restart) by triggering a transition into a recovery state that was intended to involve a network-interface restart but actually involves a full device restart, aka Bug ID CSCtn16281.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco ios -

A vulnerability in the DHCP subsystem of Cisco Aironet access points could allow an unauthenticated, adjacent attacker to create a denial of service condition The vulnerability is due to an error condition that may occur when very short DHCP leases are in use If an attacker can prevent the access point from renewing its lease, the device may res ...

CWE-399 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7997 http://www.securitytracker.com/id/1031218 https://exchange.xforce.ibmcloud.com/vulnerabilities/98691 https://nvd.nist.gov http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20141117-CVE-2014-7997

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-7997

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect