« Volver al listado

CVE-2009-2976

Estado: ModificadaAlta (7.8)—

Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Cisco — Aironet Ap1100Cisco — Aironet Ap1200

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-2976",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-08-27T17:30:00.360",
  "references": [
    {
      "url": "http://securitytracker.com/id?1022774",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.airmagnet.com/news/press_releases/2009/08252009.php",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1022774",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.airmagnet.com/news/press_releases/2009/08252009.php",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network."
    },
    {
      "lang": "es",
      "value": "Los dispositivos Cisco Aironet Lightweight Access Point (AP) envían el contenido de ciertos paquetes de multidifusión en texto plano, lo que permite a atacantes remotos descubrir las direcciones IP y MAC del Wireless LAN Controller así como los detalles de configuración del Punto de Acceso (AP) espiando la red wireless."
    }
  ],
  "lastModified": "2026-06-16T23:10:38.623",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:aironet_ap1100:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6D954F30-8AD0-41E9-8D62-BEFEBDCB3B6D"
            },
            {
              "criteria": "cpe:2.3:h:cisco:aironet_ap1200:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E8B5553-7295-4786-9F81-B4527EAD4F0B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}