Cisco Aironet AP1200 vulnerabilities

6 CVEs affecting Cisco Aironet AP1200, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-1350, published 2012-08-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-0356, published 2005-05-31. Medium severity, CVSS 5.0. EPSS: 82.8% chance of exploitation in the next 30 days. Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a…
CVE-2006-0354, published 2006-01-22. Medium severity, CVSS 5.5. EPSS: 10.5% chance of exploitation in the next 30 days. Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections)…
CVE-2012-1350, published 2012-08-06. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service (radio-interface input-queue hang) via IAPP 0x3281 packets, aka Bug ID CSCtc12426.
CVE-2005-3482, published 2005-11-03. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol (LWAPP) mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24,…
CVE-2009-2976, published 2009-08-27. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses…
CVE-2009-2861, published 2009-08-27. High severity, CVSS 7.3. EPSS: 1% chance of exploitation in the next 30 days. The Over-the-Air Provisioning (OTAP) functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does not properly implement access-point association, which allows remote attackers…