CVE-2013-1131

Vulnerability

Cisco Small Business Wireless Access Points models WAP200, WAP2000, WAP200E, and WET200 contain a vulnerability in the handling of SSID values during a site survey. A remote attacker can send a specially crafted SSID that is not properly processed, leading to a denial of service condition. The affected firmware versions are not explicitly listed in the available reference [1], but all models are impacted.

Exploitation

An attacker must be within wireless range of the target access point and able to transmit a probe request or beacon frame containing a malformed SSID. No authentication is required. The crafted SSID triggers an error in the site survey routine, causing the device to crash or become unresponsive.

Impact

Successful exploitation results in a denial of service, preventing legitimate clients from associating with the access point. The description also notes the possibility of unspecified other impact, though no further details are provided in the reference [1].

Mitigation

Cisco has not disclosed a specific firmware fix or workaround in the available reference [1]. Affected users should consult Cisco's security advisory for updated firmware releases. As of the publication date (2013-02-13), no patch is confirmed.