Cisco Embedded Wireless Controller vulnerabilities

2 CVEs affecting Cisco Embedded Wireless Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-1615, published 2021-09-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-1615, published 2021-09-23. High severity, CVSS 8.6. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller (EWC) Software for Catalyst Access Points (APs) could allow an unauthenticated, remote attacker to cause a…
CVE-2021-1565, published 2021-09-23. High severity, CVSS 8.6. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could…