CVE-2009-2976: Cisco Aironet AP1100

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network.

Affected products

  • Cisco Aironet AP1100: any version
  • Cisco Aironet AP1200: any version

Published 2009-08-27. Last modified 2026-06-16.