Denial of Service Vulnerability in Cisco Mobility Express Access Points

CVE-2016-9221

What is CVE-2016-9221?

A vulnerability exists in the handling of authentication for 802.11 ingress connections in the Cisco Mobility Express 2800 and 3800 Access Points. An unauthenticated adjacent attacker could exploit this flaw to disrupt the authentication process, leading to service outages. This condition occurs when the access points are configured in local mode on a 40 MHz channel. The issue specifically affects defined versions of the affected products, requiring prompt attention from network administrators to ensure availability and security.

References