[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fK3w4DbBqdDr6vRVkyYTgY4qHd9pazbUQO1WKeFP13WY":3,"g5a-ex:cisco\u002Fcatalyst_9105axi@*":98,"g5a-family:cisco\u002Fcatalyst_9105axi":100},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":75,"seoMetadata":76,"meta":95},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"cisco","catalyst_9105axi",0,13,"2024-03-27",[],"Catalyst 9105axi by Cisco is a technology product and 13 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,31,36,41,48,54,59,64,70],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2020-26139","An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.","2021-05-11",5.3,"v3.1","Medium",false,0.06487,{"cveId":26,"description":27,"publishedDate":19,"cvssScore":28,"cvssVersion":21,"severity":29,"isKev":23,"epssScore":30},"CVE-2020-24588","The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.",3.5,"Low",0.03611,{"cveId":32,"description":33,"publishedDate":19,"cvssScore":34,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":35},"CVE-2020-26140","An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.",6.5,0.02923,{"cveId":37,"description":38,"publishedDate":19,"cvssScore":39,"cvssVersion":21,"severity":29,"isKev":23,"epssScore":40},"CVE-2020-24587","The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.",2.6,0.02592,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":21,"severity":46,"isKev":23,"epssScore":47},"CVE-2022-20919","A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are sent to Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient input validation during processing of CIP packets. An attacker could exploit this vulnerability by sending a malformed CIP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to unexpectedly reload, resulting in a DoS condition.","2022-09-30",7.5,"High",0.01199,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":21,"severity":46,"isKev":23,"epssScore":53},"CVE-2023-20231","A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device.\r\n\r This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to execute arbitrary Cisco IOS XE Software CLI commands with level 15 privileges.\r\n\r Note: This vulnerability is exploitable only if the attacker obtains the credentials for a Lobby Ambassador account. This account is not configured by default.","2023-09-27",8.8,0.0099,{"cveId":55,"description":56,"publishedDate":11,"cvssScore":57,"cvssVersion":21,"severity":46,"isKev":23,"epssScore":58},"CVE-2024-20259","A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.\r\n\r This vulnerability is due to a crafted IPv4 DHCP request packet being mishandled when endpoint analytics are enabled. An attacker could exploit this vulnerability by sending a crafted DHCP request through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.\r\n\r Note: The attack vector is listed as network because a DHCP relay anywhere on the network could allow exploits from networks other than the adjacent one.",8.6,0.00816,{"cveId":60,"description":61,"publishedDate":44,"cvssScore":62,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":63},"CVE-2022-20855","A vulnerability in the self-healing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points could allow an authenticated, local attacker to escape the restricted controller shell and execute arbitrary commands on the underlying operating system of the access point. This vulnerability is due to improper checks throughout the restart of certain system processes. An attacker could exploit this vulnerability by logging on to an affected device and executing certain CLI commands. A successful exploit could allow the attacker to execute arbitrary commands on the underlying OS as root. To successfully exploit this vulnerability, an attacker would need valid credentials for a privilege level 15 user of the wireless controller.",6.7,0.00362,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":21,"severity":46,"isKev":23,"epssScore":69},"CVE-2021-34740","A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to incorrect error handling when an affected device receives an unexpected 802.11 frame. An attacker could exploit this vulnerability by sending certain 802.11 frames over the wireless network to an interface on an affected AP. A successful exploit could allow the attacker to cause a packet buffer leak. This could eventually result in buffer allocation failures, which would trigger a reload of the affected device.","2021-09-23",7.4,0.0036,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":34,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":74},"CVE-2023-20112","A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition.","2023-03-23",0.00303,[],{"title":77,"metaDescription":78,"keywords":79,"structuredData":80},"Catalyst 9105axi by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Catalyst 9105axi by Cisco with 13 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Catalyst 9105axi vulnerabilities, Catalyst 9105axi security, Catalyst 9105axi CVE, Cisco Catalyst 9105axi, Catalyst 9105axi threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":81,"@type":82,"name":83,"description":78,"url":84,"manufacturer":85,"applicationCategory":89,"softwareVersion":90,"mainEntity":91},"https:\u002F\u002Fschema.org","SoftwareApplication","Catalyst 9105axi","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fcatalyst_9105axi",{"@type":86,"name":87,"url":88},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","Multiple versions",{"@type":92,"name":93,"description":94,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Catalyst 9105axi Security Vulnerabilities","Security vulnerabilities affecting Catalyst 9105axi by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":96,"apiVersion":97},"2026-10-19T02:52:04.433Z","3.0",{"rows":99,"total":9,"capped":23,"failed":9},[],[101],{"product":102,"cves":103},"catalyst_9105axi_firmware",6]