$ cve CVE-2006-0354 JSON

CVE-2006-0354 EXPLOIT

5.5

MEDIUM · CVSS 2.0 · EPSS 10.5% (pctl 96)

Patch early

A public exploit exists.

Description

Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections) by sending the management interface a large number of spoofed ARP packets, which creates a large ARP table that exhausts memory, aka Bug ID CSCsc16644.

Scoring

CVSS	5.5 (MEDIUM, v2.0)
Vector	AV:A/AC:L/Au:S/C:N/I:N/A:C
EPSS	10.49% — more likely to be exploited than 96% of all CVEs
Weakness	CWE-399
On CISA KEV	no
Public exploit	yes
Published	2006-01-22
Last modified	2026-06-16

Affected (8)

Vendor	Product
cisco	aironet ap1100
cisco	aironet ap1130ag
cisco	aironet ap1200
cisco	aironet ap1230ag
cisco	aironet ap1240ag
cisco	aironet ap1300
cisco	aironet ap1400
cisco	aironet ap350

Public exploits

Source	Title	Date
exploit-db	Cisco Aironet Wireless Access Points - Memory Exhaustion ARP (Denial of Service)	2006-01-25

References

→ the Explorer · watch your stack · NVD