Cisco Aironet Access Point Discloses WEP Key Via SNMP Messages
|
|
SecurityTracker Alert ID: 1008357 |
|
SecurityTracker URL: http://securitytracker.com/id/1008357
|
|
CVE Reference:
GENERIC-MAP-NOMATCH
(Links to External Site)
|
Date: Dec 2 2003
|
Impact:
Disclosure of authentication information, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes Exploit Included: Yes
|
Version(s): Cisco Aironet 1100, 1200, and 1400 series running IOS 12.2(8)JA, 12.2(11)JA, and 12.2(11)JA1
|
Description:
A vulnerability was reported in the Cisco Aironet Access Points (AP). A remote user may be able to view the static Wired Equivalent Privacy (WEP) key.
It is reported that the AP running Cisco IOS may send static WEP keys in cleartext as part of an SNMP message if the 'snmp-server enable traps wlan-wep' command is enabled on the device. This command is reportedly disabled by default.
A remote user that is monitoring the network between the affected AP device and the SNMP network management station can obtain static WEP keys.
Dynamically configured WEP keys are reportedly not disclosed.
Cisco Aironet 1100, 1200, and 1400 series models are affected.
Cisco Aironet AP models running the VxWorks operating system are reportedly not affected.
Cisco credits Bill Van Devender with reporting this flaw.
|
Impact:
A remote user monitoring the network between the Aironet Access Point device and the device's network management station can obtain the device's static WEP keys.
|
Solution:
The vendor has issued a fixed version of IOS (12.2(13)JA1).
Cisco reports that the workaround is to disable the associated SNMP trap command by typing the following global command:
ap1200(config)#no snmp-server enable traps wlan-wep
Cisco recommends that you do not use static keys in the first place. See the Cisco advisory for Cisco's recommendations:
http://www.cisco.com/warp/public/707/cisco-sa-20031202-SNMP-trap.shtml
|
Vendor URL: www.cisco.com/warp/public/707/cisco-sa-20031202-SNMP-trap.shtml (Links to External Site)
|
Cause:
Access control error
|
Underlying OS:
|
|
Message History:
None.
|
Source Message Contents
|
|
|
[Original Message Not Available for Viewing]
|
|
