![]() |
Inicial ▼ Bookkeeping
Online ▼ Auditorias ▼
DNS
Administrado ▼
Acerca de DNS
Ordenar/Renovar
Preguntas Frecuentes
AUP
Dynamic DNS Clients
Configurar Dominios Dynamic DNS Update Password Monitoreo
de Redes ▼
Enterprise
Avanzado
Estándarr
Prueba
Preguntas Frecuentes
Resumen de Precio/Funciones
Ordenar
Muestras
Configure/Status Alert Profiles | ||
ID de Prueba: | 1.3.6.1.4.1.25623.1.0.140472 |
Categoría: | CISCO |
Título: | Cisco Aironet Access Points MAC Authentication Bypass Vulnerability |
Resumen: | A vulnerability in the implementation of Protected Extensible Authentication;Protocol (PEAP) functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access;Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected;device. |
Descripción: | Summary: A vulnerability in the implementation of Protected Extensible Authentication Protocol (PEAP) functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected device. Vulnerability Insight: The vulnerability exists because the affected device uses an incorrect default configuration setting of fail open when running in standalone mode. An attacker could exploit this vulnerability by attempting to connect to an affected device. Vulnerability Impact: A successful exploit could allow the attacker to bypass authentication and connect to the affected device. Solution: See the referenced advisory for a solution. CVSS Score: 5.4 CVSS Vector: AV:A/AC:M/Au:N/C:P/I:P/A:P |
Referencia Cruzada: |
Common Vulnerability Exposure (CVE) ID: CVE-2017-12281 BugTraq ID: 101649 http://www.securityfocus.com/bid/101649 http://www.securitytracker.com/id/1039725 |
Copyright | Copyright (C) 2017 Greenbone Networks GmbH |
Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |