CVE-2021-34740 : A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Airo

Products affected by CVE-2021-34740

Cisco » Aironet Access Point Software
Versions from including (>=) 8.10.0 and before (<) 8.10.162.0
cpe:2.3:o:cisco:aironet_access_point_software:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 1100-4g/6g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100 Integrated Services Router » Version: N/A
When used together with: Cisco » 1101-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1101 Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-2p Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1109 Integrated Services Router » Version: N/A
When used together with: Cisco » 1111x-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 1111x Integrated Services Router » Version: N/A
When used together with: Cisco » 111x Integrated Services Router » Version: N/A
When used together with: Cisco » 1120 Integrated Services Router » Version: N/A
When used together with: Cisco » 1160 Integrated Services Router » Version: N/A
When used together with: Cisco » 6300 Series Access Points » Version: N/A
When used together with: Cisco » Aironet 1540 » Version: N/A
When used together with: Cisco » Aironet 1542d » Version: N/A
When used together with: Cisco » Aironet 1542i » Version: N/A
When used together with: Cisco » Aironet 1560 » Version: N/A
When used together with: Cisco » Aironet 1562d » Version: N/A
When used together with: Cisco » Aironet 1562e » Version: N/A
When used together with: Cisco » Aironet 1562i » Version: N/A
When used together with: Cisco » Aironet 1800 » Version: N/A
When used together with: Cisco » Aironet 1800i » Version: N/A
When used together with: Cisco » Aironet 1810 » Version: N/A
When used together with: Cisco » Aironet 1810w » Version: N/A
When used together with: Cisco » Aironet 1815 » Version: N/A
When used together with: Cisco » Aironet 1815i » Version: N/A
When used together with: Cisco » Aironet 1830 » Version: N/A
When used together with: Cisco » Aironet 1830e » Version: N/A
When used together with: Cisco » Aironet 1830i » Version: N/A
When used together with: Cisco » Aironet 1840 » Version: N/A
When used together with: Cisco » Aironet 1850 » Version: N/A
When used together with: Cisco » Aironet 1850e » Version: N/A
When used together with: Cisco » Aironet 1850i » Version: N/A
When used together with: Cisco » Aironet 2800 » Version: N/A
When used together with: Cisco » Aironet 2800e » Version: N/A
When used together with: Cisco » Aironet 2800i » Version: N/A
When used together with: Cisco » Aironet 3800 » Version: N/A
When used together with: Cisco » Aironet 3800e » Version: N/A
When used together with: Cisco » Aironet 3800i » Version: N/A
When used together with: Cisco » Aironet 3800p » Version: N/A
When used together with: Cisco » Aironet 4800 » Version: N/A
When used together with: Cisco » Catalyst 9100 » Version: N/A
When used together with: Cisco » Catalyst 9105 » Version: N/A
When used together with: Cisco » Catalyst 9105axi » Version: N/A
When used together with: Cisco » Catalyst 9105axw » Version: N/A
When used together with: Cisco » Catalyst 9115 » Version: N/A
When used together with: Cisco » Catalyst 9115 Ap » Version: N/A
When used together with: Cisco » Catalyst 9115axe » Version: N/A
When used together with: Cisco » Catalyst 9115axi » Version: N/A
When used together with: Cisco » Catalyst 9117 » Version: N/A
When used together with: Cisco » Catalyst 9117 Ap » Version: N/A
When used together with: Cisco » Catalyst 9117axi » Version: N/A
When used together with: Cisco » Catalyst 9120 » Version: N/A
When used together with: Cisco » Catalyst 9120 Ap » Version: N/A
When used together with: Cisco » Catalyst 9120axe » Version: N/A
When used together with: Cisco » Catalyst 9120axi » Version: N/A
When used together with: Cisco » Catalyst 9120axp » Version: N/A
When used together with: Cisco » Catalyst 9124 » Version: N/A
When used together with: Cisco » Catalyst 9124axd » Version: N/A
When used together with: Cisco » Catalyst 9124axi » Version: N/A
When used together with: Cisco » Catalyst 9130 » Version: N/A
When used together with: Cisco » Catalyst 9130 Ap » Version: N/A
When used together with: Cisco » Catalyst 9130axe » Version: N/A
When used together with: Cisco » Catalyst 9130axi » Version: N/A
When used together with: Cisco » Catalyst Iw6300 » Version: N/A
When used together with: Cisco » Catalyst Iw6300 Ac » Version: N/A
When used together with: Cisco » Catalyst Iw6300 Dc » Version: N/A
When used together with: Cisco » Catalyst Iw6300 Dcw » Version: N/A
Cisco » Aironet Access Point Software » Version: 17.2
cpe:2.3:o:cisco:aironet_access_point_software:17.2:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 1100-4g/6g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100 Integrated Services Router » Version: N/A
When used together with: Cisco » 1101-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1101 Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-2p Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1109 Integrated Services Router » Version: N/A
When used together with: Cisco » 1111x-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 1111x Integrated Services Router » Version: N/A
When used together with: Cisco » 111x Integrated Services Router » Version: N/A
When used together with: Cisco » 1120 Integrated Services Router » Version: N/A
When used together with: Cisco » 1160 Integrated Services Router » Version: N/A
When used together with: Cisco » 6300 Series Access Points » Version: N/A
When used together with: Cisco » Aironet 1540 » Version: N/A
When used together with: Cisco » Aironet 1542d » Version: N/A
When used together with: Cisco » Aironet 1542i » Version: N/A
When used together with: Cisco » Aironet 1560 » Version: N/A
When used together with: Cisco » Aironet 1562d » Version: N/A
When used together with: Cisco » Aironet 1562e » Version: N/A
When used together with: Cisco » Aironet 1562i » Version: N/A
When used together with: Cisco » Aironet 1800 » Version: N/A
When used together with: Cisco » Aironet 1800i » Version: N/A
When used together with: Cisco » Aironet 1810 » Version: N/A
When used together with: Cisco » Aironet 1810w » Version: N/A
When used together with: Cisco » Aironet 1815 » Version: N/A
When used together with: Cisco » Aironet 1815i » Version: N/A
When used together with: Cisco » Aironet 1830 » Version: N/A
When used together with: Cisco » Aironet 1830e » Version: N/A
When used together with: Cisco » Aironet 1830i » Version: N/A
When used together with: Cisco » Aironet 1840 » Version: N/A
When used together with: Cisco » Aironet 1850 » Version: N/A
When used together with: Cisco » Aironet 1850e » Version: N/A
When used together with: Cisco » Aironet 1850i » Version: N/A
When used together with: Cisco » Aironet 2800 » Version: N/A
When used together with: Cisco » Aironet 2800e » Version: N/A
When used together with: Cisco » Aironet 2800i » Version: N/A
When used together with: Cisco » Aironet 3800 » Version: N/A
When used together with: Cisco » Aironet 3800e » Version: N/A
When used together with: Cisco » Aironet 3800i » Version: N/A
When used together with: Cisco » Aironet 3800p » Version: N/A
When used together with: Cisco » Aironet 4800 » Version: N/A
When used together with: Cisco » Catalyst 9100 » Version: N/A
When used together with: Cisco » Catalyst 9105 » Version: N/A
When used together with: Cisco » Catalyst 9105axi » Version: N/A
When used together with: Cisco » Catalyst 9105axw » Version: N/A
When used together with: Cisco » Catalyst 9115 » Version: N/A
When used together with: Cisco » Catalyst 9115 Ap » Version: N/A
When used together with: Cisco » Catalyst 9115axe » Version: N/A
When used together with: Cisco » Catalyst 9115axi » Version: N/A
When used together with: Cisco » Catalyst 9117 » Version: N/A
When used together with: Cisco » Catalyst 9117 Ap » Version: N/A
When used together with: Cisco » Catalyst 9117axi » Version: N/A
When used together with: Cisco » Catalyst 9120 » Version: N/A
When used together with: Cisco » Catalyst 9120 Ap » Version: N/A
When used together with: Cisco » Catalyst 9120axe » Version: N/A
When used together with: Cisco » Catalyst 9120axi » Version: N/A
When used together with: Cisco » Catalyst 9120axp » Version: N/A
When used together with: Cisco » Catalyst 9124 » Version: N/A
When used together with: Cisco » Catalyst 9124axd » Version: N/A
When used together with: Cisco » Catalyst 9124axi » Version: N/A
When used together with: Cisco » Catalyst 9130 » Version: N/A
When used together with: Cisco » Catalyst 9130 Ap » Version: N/A
When used together with: Cisco » Catalyst 9130axe » Version: N/A
When used together with: Cisco » Catalyst 9130axi » Version: N/A
When used together with: Cisco » Catalyst Iw6300 » Version: N/A
When used together with: Cisco » Catalyst Iw6300 Ac » Version: N/A
When used together with: Cisco » Catalyst Iw6300 Dc » Version: N/A
When used together with: Cisco » Catalyst Iw6300 Dcw » Version: N/A
Cisco » Aironet Access Point Software » Version: 17.3
cpe:2.3:o:cisco:aironet_access_point_software:17.3:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 1100-4g/6g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100 Integrated Services Router » Version: N/A
When used together with: Cisco » 1101-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1101 Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-2p Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1109 Integrated Services Router » Version: N/A
When used together with: Cisco » 1111x-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 1111x Integrated Services Router » Version: N/A
When used together with: Cisco » 111x Integrated Services Router » Version: N/A
When used together with: Cisco » 1120 Integrated Services Router » Version: N/A
When used together with: Cisco » 1160 Integrated Services Router » Version: N/A
When used together with: Cisco » 6300 Series Access Points » Version: N/A
When used together with: Cisco » Aironet 1540 » Version: N/A
When used together with: Cisco » Aironet 1542d » Version: N/A
When used together with: Cisco » Aironet 1542i » Version: N/A
When used together with: Cisco » Aironet 1560 » Version: N/A
When used together with: Cisco » Aironet 1562d » Version: N/A
When used together with: Cisco » Aironet 1562e » Version: N/A
When used together with: Cisco » Aironet 1562i » Version: N/A
When used together with: Cisco » Aironet 1800 » Version: N/A
When used together with: Cisco » Aironet 1800i » Version: N/A
When used together with: Cisco » Aironet 1810 » Version: N/A
When used together with: Cisco » Aironet 1810w » Version: N/A
When used together with: Cisco » Aironet 1815 » Version: N/A
When used together with: Cisco » Aironet 1815i » Version: N/A
When used together with: Cisco » Aironet 1830 » Version: N/A
When used together with: Cisco » Aironet 1830e » Version: N/A
When used together with: Cisco » Aironet 1830i » Version: N/A
When used together with: Cisco » Aironet 1840 » Version: N/A
When used together with: Cisco » Aironet 1850 » Version: N/A
When used together with: Cisco » Aironet 1850e » Version: N/A
When used together with: Cisco » Aironet 1850i » Version: N/A
When used together with: Cisco » Aironet 2800 » Version: N/A
When used together with: Cisco » Aironet 2800e » Version: N/A
When used together with: Cisco » Aironet 2800i » Version: N/A
When used together with: Cisco » Aironet 3800 » Version: N/A
When used together with: Cisco » Aironet 3800e » Version: N/A
When used together with: Cisco » Aironet 3800i » Version: N/A
When used together with: Cisco » Aironet 3800p » Version: N/A
When used together with: Cisco » Aironet 4800 » Version: N/A
When used together with: Cisco » Catalyst 9100 » Version: N/A
When used together with: Cisco » Catalyst 9105 » Version: N/A
When used together with: Cisco » Catalyst 9105axi » Version: N/A
When used together with: Cisco » Catalyst 9105axw » Version: N/A
When used together with: Cisco » Catalyst 9115 » Version: N/A
When used together with: Cisco » Catalyst 9115 Ap » Version: N/A
When used together with: Cisco » Catalyst 9115axe » Version: N/A
When used together with: Cisco » Catalyst 9115axi » Version: N/A
When used together with: Cisco » Catalyst 9117 » Version: N/A
When used together with: Cisco » Catalyst 9117 Ap » Version: N/A
When used together with: Cisco » Catalyst 9117axi » Version: N/A
When used together with: Cisco » Catalyst 9120 » Version: N/A
When used together with: Cisco » Catalyst 9120 Ap » Version: N/A
When used together with: Cisco » Catalyst 9120axe » Version: N/A
When used together with: Cisco » Catalyst 9120axi » Version: N/A
When used together with: Cisco » Catalyst 9120axp » Version: N/A
When used together with: Cisco » Catalyst 9124 » Version: N/A
When used together with: Cisco » Catalyst 9124axd » Version: N/A
When used together with: Cisco » Catalyst 9124axi » Version: N/A
When used together with: Cisco » Catalyst 9130 » Version: N/A
When used together with: Cisco » Catalyst 9130 Ap » Version: N/A
When used together with: Cisco » Catalyst 9130axe » Version: N/A
When used together with: Cisco » Catalyst 9130axi » Version: N/A
When used together with: Cisco » Catalyst Iw6300 » Version: N/A
When used together with: Cisco » Catalyst Iw6300 Ac » Version: N/A
When used together with: Cisco » Catalyst Iw6300 Dc » Version: N/A
When used together with: Cisco » Catalyst Iw6300 Dcw » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-34740

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 25 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-34740

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.1	MEDIUM	AV:A/AC:L/Au:N/C:N/I:N/A:C	6.5	6.9	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
7.4	HIGH	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	2.8	4.0	Cisco Systems, Inc.
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High
7.4	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	2.8	4.0	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2021-34740

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.
Assigned by:
- nvd@nist.gov (Primary)
- ykramarz@cisco.com (Secondary)

References for CVE-2021-34740

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-wpa-pktleak-dos-uSTyGrL

Cisco Aironet Access Points WLAN Control Protocol Packet Buffer Leak Denial of Service Vulnerability
Vendor Advisory

Vulnerability Details : CVE-2021-34740

Products affected by CVE-2021-34740

Exploit prediction scoring system (EPSS) score for CVE-2021-34740

CVSS scores for CVE-2021-34740

CWE ids for CVE-2021-34740

References for CVE-2021-34740