CVE-2021-34767
HIGHCisco IOS XE Wireless Controller Software - Unauthenticated Denial of Service via IPv6 Traffic Processing
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-34767. PoCs published by lukejenkins.
AI-analyzed exploit summary This repository provides a detailed technical description of CVE-2021-34767, a DoS vulnerability in Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers. It explains the root cause (logic error in IPv6 traffic processing) and references official advisories but lacks exploit code.
Description
A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a Layer 2 (L2) loop in a configured VLAN, resulting in a denial of service (DoS) condition for that VLAN. The vulnerability is due to a logic error when processing specific link-local IPv6 traffic. An attacker could exploit this vulnerability by sending a crafted IPv6 packet that would flow inbound through the wired interface of an affected device. A successful exploit could allow the attacker to cause traffic drops in the affected VLAN, thus triggering the DoS condition.
Exploits (1)
This repository provides a detailed technical description of CVE-2021-34767, a DoS vulnerability in Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers. It explains the root cause (logic error in IPv6 traffic processing) and references official advisories but lacks exploit code.
References (1)
Scores
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H