CVE-2015-4340: Cisco AP IPv6 Gateway Modification Vulnerability

Key Information Summary Vulnerability Overview Vulnerability Name: Cisco Access Point Software Intermittent IPv6 Gateway Change Vulnerability CVE ID: CVE-2015-4340 Severity: Medium (CVSS v2 Base Score: 4.3) Release Date: September 14, 2015 Affected Products Affected Products: - 6300 Series Embedded Services Access Points (APs) - Aironet 1800 Series APs - Aironet 2800 Series APs - Aironet 3700 APs - Aironet 3800 APs - Catalyst 9100 APs - Integrated Services Routers (ISRs) Exploitation Mechanism The vulnerability stems from a logic error in the processing of IPv6 Router Advertisement (RA) packets, allowing an unauthenticated adjacent attacker to modify the IPv6 gateway on affected devices. Successful exploitation could result in a temporary change of the IPv6 gateway on the affected device, potentially impacting any wireless clients associated with that access point. Mitigation Fix: Cisco has released software updates to address this vulnerability. Users are advised to upgrade to the latest versions. No Workaround Available: There are no temporary workarounds currently available to mitigate this vulnerability. Public Disclosure and Announcements This vulnerability was discovered during a Cisco Technical Assistance Center (TAC) support case. There are no public reports indicating that this vulnerability has been exploited maliciously. References Cisco Security Advisory

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2015-4340: Cisco AP IPv6 Gateway Modification Vulnerability