CVE-2018-0381

mediumpriority · track · 27EPSS 0.005 · 44 %ileEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.52% (44th) EPSS
CVSS 5.5 · medium
Is it mine?
14 products
Check your exposure
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cisco_csaf

EPSS · scored 2026-10-27

A vulnerability in the Cisco Aironet Series Access Points (APs) software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a deadlock condition that may occur when an affected AP attempts to dequeue aggregated traffic that is destined to an attacker-controlled wireless client. An attacker who can successfully transition between multiple Service Set Identifiers (SSIDs) hosted on the same AP while replicating the required traffic patterns could trigger the deadlock condition. A watchdog timer that detects the condition will trigger a reload of the device, resulting in a DoS condition while the device restarts.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

No fix is available; mitigate or reduce exposure.

  • No fix availableCisco Mobility Expresscisco_csaf

    No remediation is available at this time.

02

cvss

Technical severity, 0–10. One row per scoring source.

6.8
010

base score 0–10 · higher = more severe · hover a vector to decode

v2.05.5mediumAV:A/AC:L/Au:S/C:N/I:N/A:Cprimary · NVD / NIST USexploitability 5.1 · impact 6.9
v3.16.8mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 2.3 · impact 4
v3.05.8mediumCVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:Hsecondary · ENISA EU
v3.05.8mediumCVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:Hsecondary · psirt@cisco.com USexploitability 1.3 · impact 4
v3.05.8mediumCVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:Hsecondary · Cisco PSIRT US
v3.15.8mediumAV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU
v3.16.2mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-667USprimaryCWE-400USCWE-400US
05

affected products (14)

Products and version ranges known to be affected.

06

advisories (1)

Vendor and ecosystem advisories describing this.

  • cisco-sa-20181017-aironet-dosCisco Aironet 1560, 1800, 2800, and 3800 Series Access Points Denial of Service Vulnerability2018-10-17csaf · cisco_csafUS

    A vulnerability in the Cisco Aironet 1560, 1800, 2800, and 3800 Series Access Points (APs) software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a deadlock condition that may occur when an affected AP attempts to dequeue aggregated traffic that is destined to an attacker-controlled wireless client. An attacker who can successfully transition between multiple Service Set Identifiers (SSIDs) hosted on the same AP while replicating the required traffic patterns could trigger the deadlock condition. A watchdog timer that detects the condition will trigger a reload of the device, resulting in a DoS condition while the device restarts. Cisco has released software updates that address this vulnerability.

07

also known as (4)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bducisco_csafnvdNVDCVE.orgMITRE
published 2018-10-17modified 2026-06-17
10

references (10)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan