Read the docs
TI-2018-00210 Aliases CVE-2018-0249GHSA-wwhv-grrm-9cfg

Improper input validation in Cisco Aironet 1800 Series Access Point

Priority LOW 21CWE-20Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Low
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A vulnerability when handling incoming 802.11 Association Requests for Cisco Aironet 1800 Series Access Point (APs) on Qualcomm Atheros (QCA) based hardware platforms could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected system. A successful exploit could prevent new clients from joining the AP. The vulnerability is due to incorrect handling of malformed or invalid 802.11 Association Requests. An attacker could exploit this vulnerability by sending a malformed stream of 802.11 Association Requests to the local interface of the targeted device. A successful exploit could allow the attacker to cause a DoS situation on an affected system, causing new client 802.11 Association Requests to fail. This vulnerability affects the following Cisco products: Aironet 1560 Series Access Points, Aironet 1810 Series OfficeExtend Access Points, Aironet 1810w Series Access Points, Aironet 1815 Series Access Points, Aironet 1830 Series Access Points, Aironet 1850 Series Access Points, Aironet 2800 Series Access Points, Aironet 3800 Series Access Points. Cisco Bug IDs: CSCvg02116.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00577 47th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cisco Aironet 1800 Series Access PointCisco Aironet 1800 Series Access Point—No fix listedCNA
  • Cisco Aironet 1800 Series Access Point Vendor— Affected Cisco Aironet 1800 Series Access Point Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:o:cisco:aironet_access_point_software:8.2\(161.0\):*:*:*:*:*:*:*8.2(161.0)VulnerableCisco
  • cpe:2.3:o:cisco:aironet_access_point_software:8.2\(161.0\):*:*:*:*:*:*:* Versions 8.2(161.0) Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-0249
  2. 2026-10-03 Alias added: GHSA-wwhv-grrm-9cfg

References

Advisory 1

  • TI-2018-00197 Improper input validation in Cisco Aironet 1810, 1830, and 1850 Series Access Points CVSS 3.0HIGH 8.6
  • TI-2017-02928 Access control flaw in Cisco Mobility Express 1800 Access Point Series CVSS 3.0CRITICAL 9.8
  • TI-2022-05181 Cisco Embedded Wireless Controller with Catalyst Access Points IP Flood Denial of Service Vulnerability CVSS 3.1HIGH 8.6
  • TI-2020-03104 Cisco Aironet Access Points UDP Flooding Denial of Service Vulnerability CVSS 3.1HIGH 8.6
  • TI-2021-01164 Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure Vulnerability CVSS 3.1HIGH 7.5
  • TI-2020-03103 Cisco Aironet Access Point Authentication Flood Denial of Service Vulnerability CVSS 3.1HIGH 8.6
See all 26 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences