[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fajTVpNrkGhc_5TCdkcvhfTE8Q62JCECLFymtz_GtV_8":3,"g5a-ex:cisco\u002Faironet_1815i@*":101,"g5a-family:cisco\u002Faironet_1815i":103},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":78,"seoMetadata":79,"meta":98},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"cisco","aironet_1815i",0,11,"2023-03-23",[],"Aironet 1815i by Cisco is a technology product and 11 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,32,39,45,50,55,62,68,73],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2022-20695","A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to bypass authentication controls and log in to the device through the management interface This vulnerability is due to the improper implementation of the password validation algorithm. An attacker could exploit this vulnerability by logging in to an affected device with crafted credentials. A successful exploit could allow the attacker to bypass authentication and log in to the device as an administrator. The attacker could obtain privileges that are the same level as an administrative user but it depends on the crafted credentials. Note: This vulnerability exists because of a non-default device configuration that must be present for it to be exploitable. For details about the vulnerable configuration, see the Vulnerable Products section of this advisory.","2022-04-15",10,"v3.1","Critical",false,0.1977,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":31},"CVE-2020-26139","An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.","2021-05-11",5.3,"Medium",0.06487,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":37,"severity":22,"isKev":23,"epssScore":38},"CVE-2017-3831","A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated, remote attacker to bypass authentication. The attacker could be granted full administrator privileges. The vulnerability is due to improper implementation of authentication for accessing certain web pages using the GUI interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web interface of the affected system. A successful exploit could allow the attacker to bypass authentication and perform unauthorized configuration changes or issue control commands to the affected device. This vulnerability affects Cisco Mobility Express 1800 Series Access Points running a software version prior to 8.2.110.0. Cisco Bug IDs: CSCuy68219.","2017-03-15",9.8,"v3.0",0.05275,{"cveId":40,"description":41,"publishedDate":28,"cvssScore":42,"cvssVersion":21,"severity":43,"isKev":23,"epssScore":44},"CVE-2020-24588","The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.",3.5,"Low",0.03611,{"cveId":46,"description":47,"publishedDate":28,"cvssScore":48,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":49},"CVE-2020-26140","An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.",6.5,0.02923,{"cveId":51,"description":52,"publishedDate":28,"cvssScore":53,"cvssVersion":21,"severity":43,"isKev":23,"epssScore":54},"CVE-2020-24587","The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.",2.6,0.02592,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":21,"severity":60,"isKev":23,"epssScore":61},"CVE-2021-34740","A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to incorrect error handling when an affected device receives an unexpected 802.11 frame. An attacker could exploit this vulnerability by sending certain 802.11 frames over the wireless network to an interface on an affected AP. A successful exploit could allow the attacker to cause a packet buffer leak. This could eventually result in buffer allocation failures, which would trigger a reload of the affected device.","2021-09-23",7.4,"High",0.0036,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":67},"CVE-2022-20728","A vulnerability in the client forwarding code of multiple Cisco Access Points (APs) could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards packets that are destined to a wireless client if they are received on the native VLAN. An attacker could exploit this vulnerability by obtaining access to the native VLAN and directing traffic directly to the client through their MAC\u002FIP combination. A successful exploit could allow the attacker to bypass VLAN separation and potentially also bypass any Layer 3 protection mechanisms that are deployed.","2022-09-30",4.7,0.00267,{"cveId":69,"description":70,"publishedDate":11,"cvssScore":71,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":72},"CVE-2023-20056","A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to cause an affected device to reload spontaneously, resulting in a DoS condition.",5.5,0.00257,{"cveId":74,"description":75,"publishedDate":11,"cvssScore":76,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":77},"CVE-2023-20097","A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This vulnerability is due to improper input validation of commands that are issued from a wireless controller to an AP. An attacker with Administrator access to the CLI of the controller could exploit this vulnerability by issuing a command with crafted arguments. A successful exploit could allow the attacker to gain full root access on the AP.",6.7,0.00236,[],{"title":80,"metaDescription":81,"keywords":82,"structuredData":83},"Aironet 1815i by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Aironet 1815i by Cisco with 11 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Aironet 1815i vulnerabilities, Aironet 1815i security, Aironet 1815i CVE, Cisco Aironet 1815i, Aironet 1815i threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":84,"@type":85,"name":86,"description":81,"url":87,"manufacturer":88,"applicationCategory":92,"softwareVersion":93,"mainEntity":94},"https:\u002F\u002Fschema.org","SoftwareApplication","Aironet 1815i","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Faironet_1815i",{"@type":89,"name":90,"url":91},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","Multiple versions",{"@type":95,"name":96,"description":97,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Aironet 1815i Security Vulnerabilities","Security vulnerabilities affecting Aironet 1815i by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":99,"apiVersion":100},"2026-10-19T02:04:15.307Z","3.0",{"rows":102,"total":9,"capped":23,"failed":9},[],[104],{"product":105,"cves":106},"aironet_1815i_firmware",6]