Cisco Aironet AP1100 vulnerabilities

4 CVEs affecting Cisco Aironet AP1100, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-1350, published 2012-08-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-0354, published 2006-01-22. Medium severity, CVSS 5.5. EPSS: 10.5% chance of exploitation in the next 30 days. Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections)…
CVE-2012-1350, published 2012-08-06. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service (radio-interface input-queue hang) via IAPP 0x3281 packets, aka Bug ID CSCtc12426.
CVE-2009-2976, published 2009-08-27. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses…
CVE-2009-2861, published 2009-08-27. High severity, CVSS 7.3. EPSS: 1% chance of exploitation in the next 30 days. The Over-the-Air Provisioning (OTAP) functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does not properly implement access-point association, which allows remote attackers…