7.4 High

CVE-2021-1439 A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco Aironet Series Access Points Software could allow…

Description

A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of incoming mDNS traffic. An attacker could exploit this vulnerability by sending a crafted mDNS packet to an affected device through a wireless network that is configured in FlexConnect local switching mode or through a wired network on a configured mDNS VLAN. A successful exploit could allow the attacker to cause the access point (AP) to reboot, resulting in a DoS condition.

Affected products and versions

Product	Affected versions	Fixed in
Cisco Aironet Access Point Software (IOS XE Controller)	Versions not published

References

20210324 Cisco Aironet Access Points FlexConnect Multicast DNS Denial of Service Vulnerability tools.cisco.com

Timeline

Published March 24, 2021
Last modified November 8, 2024

The 11 CVEs of Cisco Aironet Access Point Software (IOS XE Controller) →

CVE-2025-20365 A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an… 4.3 Medium CVE-2025-20364 A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow… 4.3 Medium CVE-2024-20418 A vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco… 10.0 Critical CVE-2024-20271 A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote… 8.6 High

Track this CVE