[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdhgAeXacsLv8AkRFwqOEgVc7x-NIxn6h3wei5ld7cw0":3,"g5a-ex:cisco\u002Faironet_2800i@*":99,"g5a-family:cisco\u002Faironet_2800i":101},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":76,"seoMetadata":77,"meta":96},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"cisco","aironet_2800i",0,21,"2023-03-23",[],"Aironet 2800i by Cisco is a technology product and 21 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,32,37,43,50,56,60,66,72],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2022-20695","A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to bypass authentication controls and log in to the device through the management interface This vulnerability is due to the improper implementation of the password validation algorithm. An attacker could exploit this vulnerability by logging in to an affected device with crafted credentials. A successful exploit could allow the attacker to bypass authentication and log in to the device as an administrator. The attacker could obtain privileges that are the same level as an administrative user but it depends on the crafted credentials. Note: This vulnerability exists because of a non-default device configuration that must be present for it to be exploitable. For details about the vulnerable configuration, see the Vulnerable Products section of this advisory.","2022-04-15",10,"v3.1","Critical",false,0.1977,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":31},"CVE-2020-26139","An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.","2021-05-11",5.3,"Medium",0.06487,{"cveId":33,"description":34,"publishedDate":28,"cvssScore":35,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":36},"CVE-2020-26140","An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.",6.5,0.02923,{"cveId":38,"description":39,"publishedDate":28,"cvssScore":40,"cvssVersion":21,"severity":41,"isKev":23,"epssScore":42},"CVE-2020-24587","The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.",2.6,"Low",0.02592,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":21,"severity":48,"isKev":23,"epssScore":49},"CVE-2020-3560","A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device. The vulnerability is due to improper resource management while processing specific packets. An attacker could exploit this vulnerability by sending a series of crafted UDP packets to a specific port on an affected device. A successful exploit could either allow the attacker to tear down the connection between the AP and the wireless LAN controller, resulting in the affected device not being able to process client traffic, or cause the vulnerable device to reload, triggering a DoS condition. After the attack, the affected device should automatically recover its normal functions without manual intervention.","2020-09-24",8.6,"High",0.01415,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":35,"cvssVersion":54,"severity":30,"isKev":23,"epssScore":55},"CVE-2017-12273","A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency (RF) adjacent attacker to cause the Access Point (AP) to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient frame validation of the 802.11 association request. An attacker could exploit this vulnerability by sending a malformed 802.11 association request to the targeted device. An exploit could allow the attacker to cause the AP to reload, resulting in a DoS condition while the AP is reloading. This vulnerability affects the following Cisco products running either the Lightweight AP Software or Mobility Express image: Aironet 1560 Series Access Points, Aironet 2800 Series Access Points, Aironet 3800 Series Access Points. Note: The Cisco Aironet 1560 Series Access Point device is supported as of release 8.3.112.0. Cisco Bug IDs: CSCve12189.","2017-11-02","v3.0",0.0087,{"cveId":57,"description":58,"publishedDate":53,"cvssScore":35,"cvssVersion":54,"severity":30,"isKev":23,"epssScore":59},"CVE-2017-12274","A vulnerability in Extensible Authentication Protocol (EAP) ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency (RF) adjacent attacker to cause the Access Point (AP) to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of the EAP frame. An attacker could exploit this vulnerability by sending a malformed EAP frame to the targeted device. A successful exploit could allow the attacker to cause the AP to reload, resulting in a DoS condition while the AP is reloading. It may be necessary to manually power cycle the device in order for it to recover. This vulnerability affects the following Cisco products running either the Lightweight AP Software or Mobility Express image: Aironet 1560 Series Access Points, Aironet 2800 Series Access Points, Aironet 3800 Series Access Points. Note: The Cisco Aironet 1560 Series Access Point device is supported as of release 8.3.112.0. Cisco Bug IDs: CSCve18935.",0.00811,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":54,"severity":30,"isKev":23,"epssScore":65},"CVE-2019-1835","A vulnerability in the CLI of Cisco Aironet Access Points (APs) could allow an authenticated, local attacker to access sensitive information stored in an AP. The vulnerability is due to improper sanitization of user-supplied input in specific CLI commands. An attacker could exploit this vulnerability by accessing the CLI of an affected AP with administrator privileges and issuing crafted commands that result in directory traversal. A successful exploit could allow the attacker to view system files on the affected device, which could contain sensitive information. Software versions 8.8 and 8.9 are affected.","2019-04-18",4.4,0.00768,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":54,"severity":48,"isKev":23,"epssScore":71},"CVE-2017-3873","A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Access Point (AP) or Mobility Express image could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges. The vulnerability is due to insufficient validation of PnP server responses. The PnP feature is only active while the device does not contain a configuration, such as a first time boot or after a factory reset has been issued. An attacker with the ability to respond to PnP configuration requests from the affected device can exploit the vulnerability by returning malicious PnP responses. If a Cisco Application Policy Infrastructure Controller - Enterprise Module (APIC-EM) is available on the network, the attacker would need to exploit the issue in the short window before a valid PnP response was received. If successful, the attacker could gain the ability to execute arbitrary code with root privileges on the underlying operating system of the device. Cisco has confirmed that the only vulnerable software version is 8.3.102.0. Cisco Bug IDs: CSCvb42386.","2017-05-16",7.5,0.00745,{"cveId":73,"description":74,"publishedDate":53,"cvssScore":70,"cvssVersion":54,"severity":48,"isKev":23,"epssScore":75},"CVE-2017-12281","A vulnerability in the implementation of Protected Extensible Authentication Protocol (PEAP) functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected device. The vulnerability exists because the affected device uses an incorrect default configuration setting of fail open when running in standalone mode. An attacker could exploit this vulnerability by attempting to connect to an affected device. A successful exploit could allow the attacker to bypass authentication and connect to the affected device. This vulnerability affects Cisco Aironet 1800, 2800, and 3800 Series Access Points that are running a vulnerable software release and use WLAN configuration settings that include FlexConnect local switching and central authentication with MAC filtering. Cisco Bug IDs: CSCvd46314.",0.00715,[],{"title":78,"metaDescription":79,"keywords":80,"structuredData":81},"Aironet 2800i by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Aironet 2800i by Cisco with 21 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Aironet 2800i vulnerabilities, Aironet 2800i security, Aironet 2800i CVE, Cisco Aironet 2800i, Aironet 2800i threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":82,"@type":83,"name":84,"description":79,"url":85,"manufacturer":86,"applicationCategory":90,"softwareVersion":91,"mainEntity":92},"https:\u002F\u002Fschema.org","SoftwareApplication","Aironet 2800i","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Faironet_2800i",{"@type":87,"name":88,"url":89},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","Multiple versions",{"@type":93,"name":94,"description":95,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Aironet 2800i Security Vulnerabilities","Security vulnerabilities affecting Aironet 2800i by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":97,"apiVersion":98},"2026-10-17T16:32:17.379Z","3.0",{"rows":100,"total":9,"capped":23,"failed":9},[],[102],{"product":103,"cves":104},"aironet_2800i_firmware",6]