Vulnerability Details CVE-2016-6361
The Aggregated MAC Protocol Data Unit (AMPDU) implementation on Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.121.0 and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service (device reload) via a crafted AMPDU header, aka Bug ID CSCuz56288.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 76.7%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 6.1
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-aap
- http://www.securityfocus.com/bid/92508
- http://www.securitytracker.com/id/1036648
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-aap
- http://www.securityfocus.com/bid/92508
- http://www.securitytracker.com/id/1036648
Products affected by CVE-2016-6361
-
cpe:2.3:a:cisco:aironet_access_point_software:8.1(112.3)
-
cpe:2.3:a:cisco:aironet_access_point_software:8.1(112.4)
-
cpe:2.3:a:cisco:aironet_access_point_software:8.1(131.0)
-
cpe:2.3:a:cisco:aironet_access_point_software:8.1(15.14)
-
cpe:2.3:a:cisco:aironet_access_point_software:8.2(100.0)
-
cpe:2.3:a:cisco:aironet_access_point_software:8.2(102.43)
-
cpe:2.3:a:cisco:aironet_access_point_software:8.3.0