CVE-2009-2976 Information disclosure in n/a
Remote attackers can sniff wireless networks to discover sensitive MAC addresses, IP addresses, and configuration details from Cisco Aironet Access Points.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2009-2976?
CVE-2009-2976 is a high-severity vulnerability in n/a, published on 27 Aug 2009. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network.
Weakness: CWE-310
Which versions are affected by CVE-2009-2976?
It affects 2 products.
Products include Cisco Aironet Ap1100, Cisco Aironet Ap1200.
How do I fix CVE-2009-2976?
No fix has been published for CVE-2009-2976 yet. Limit exposure of the affected software until one is available.
Is CVE-2009-2976 being exploited?
There is no known exploitation of CVE-2009-2976 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-v58x-whgv-c2w3.